Static task
static1
Behavioral task
behavioral1
Sample
75487fb8a4db43e35025258301974d96ea5b68674027a1acb5f8bb1bc1756bb0.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75487fb8a4db43e35025258301974d96ea5b68674027a1acb5f8bb1bc1756bb0.dll
Resource
win10v2004-20220812-en
General
-
Target
75487fb8a4db43e35025258301974d96ea5b68674027a1acb5f8bb1bc1756bb0
-
Size
30KB
-
MD5
f96697729c5d3fb09a0c05f347417460
-
SHA1
00c93b26e6192cca9c8f5d28c04704f8712b8cc9
-
SHA256
75487fb8a4db43e35025258301974d96ea5b68674027a1acb5f8bb1bc1756bb0
-
SHA512
dea59b83dffe685de1c8ed4bd735718c4592c527620a546fcb350df7b2e73d9e305c650ed4e577adf14a3b94de65efe9e45018d759219e4a3d35798d2613976c
-
SSDEEP
768:kHkRUNpq8jJiCL8Ovb5rIlm1OPDk9+FMFXjba3V:kHdnF82LQDk9hXj2
Malware Config
Signatures
Files
-
75487fb8a4db43e35025258301974d96ea5b68674027a1acb5f8bb1bc1756bb0.dll windows x86
aff6da0a187afb447075475c2c2d150b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
IsBadReadPtr
Sleep
DisableThreadLibraryCalls
GetModuleHandleA
VirtualProtect
CreateThread
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetCurrentProcessId
user32
SetRect
GetAsyncKeyState
GetCursorPos
mouse_event
d3dx9_43
D3DXCreateFontA
msvcr90
_malloc_crt
free
_encoded_null
_decode_pointer
_encode_pointer
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
??2@YAPAXI@Z
malloc
vsprintf_s
system
memset
__CxxFrameHandler3
_CIsqrt
_CIsin
_CIcos
_CIatan2
_initterm
memcpy
Sections
_TEXT Size: 512B - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ