Static task
static1
Behavioral task
behavioral1
Sample
6c8c9eebf5f286d4ec8acd0b10e82c509e88c394dea0f7396830a115f2cb5e82.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6c8c9eebf5f286d4ec8acd0b10e82c509e88c394dea0f7396830a115f2cb5e82.dll
Resource
win10v2004-20220901-en
General
-
Target
6c8c9eebf5f286d4ec8acd0b10e82c509e88c394dea0f7396830a115f2cb5e82
-
Size
156KB
-
MD5
8b738bf4f84155d683bd2d84093a6b43
-
SHA1
2de1a23bfcfb4962eedd9bc14fa22ad32f7e72a5
-
SHA256
6c8c9eebf5f286d4ec8acd0b10e82c509e88c394dea0f7396830a115f2cb5e82
-
SHA512
d0689cc49ac2079c89e4aed85ec9f8209c785c5cc81db6e24843af06d8e536c5559efb1fe3d7e4d3721a6f72501ef44b6ab9d43face63c0dfd73c8c099c1ebf2
-
SSDEEP
3072:NhYp1FkbBkw0WEBenWofkDtL+wRz7qZ1UoPIn1R9FzlySZ6C:Nepsb/0WEEWCsiwRO1UV1R9Fzlj
Malware Config
Signatures
Files
-
6c8c9eebf5f286d4ec8acd0b10e82c509e88c394dea0f7396830a115f2cb5e82.dll windows x86
367ff124085d7931241dea8aed785c0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
CreateProcessW
DeleteCriticalSection
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetWindowsDirectoryW
CreateFileMappingW
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalFree
MapViewOfFile
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
lstrcpynW
VirtualAlloc
ReadFile
GlobalFree
CloseHandle
advapi32
RegOpenKeyW
msvcrt
_wcsnicmp
wcscpy
_purecall
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444444 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ