?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
5bfc274787bcf2240de98cb6bf7a91d93a01d051648cba7dbce31d2d7aff9ba3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bfc274787bcf2240de98cb6bf7a91d93a01d051648cba7dbce31d2d7aff9ba3.dll
Resource
win10v2004-20220901-en
General
-
Target
5bfc274787bcf2240de98cb6bf7a91d93a01d051648cba7dbce31d2d7aff9ba3
-
Size
56KB
-
MD5
6a8c13d63fb73cf1d8d85e9b64c8fba0
-
SHA1
6fce7ccde5a330264040c514ef1fd8157f98cce4
-
SHA256
5bfc274787bcf2240de98cb6bf7a91d93a01d051648cba7dbce31d2d7aff9ba3
-
SHA512
84ca904195144af28584f15f8854da15619d50db45e615ce1ad354058f5ee3e822cf10d879d6e3719fd5c3456b053f99c9a320736dbf643132b014198f2a8bf6
-
SSDEEP
1536:/vTmajXol5MKNR/ZmxNiiFQM8KYXtfd018:/vlQNR/ZmzZr8KkRd
Malware Config
Signatures
Files
-
5bfc274787bcf2240de98cb6bf7a91d93a01d051648cba7dbce31d2d7aff9ba3.dll windows x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ