Static task
static1
Behavioral task
behavioral1
Sample
50a666d1501b6aa9961ec1bbe095e019409a540e47e7bd11c0c41a05ab22bd83.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
50a666d1501b6aa9961ec1bbe095e019409a540e47e7bd11c0c41a05ab22bd83.dll
Resource
win10v2004-20220812-en
General
-
Target
50a666d1501b6aa9961ec1bbe095e019409a540e47e7bd11c0c41a05ab22bd83
-
Size
63KB
-
MD5
22299f6967462eb6d56e77ec14edc200
-
SHA1
fbe714d5746a4b27ab17ae1aec6fc4d1dbc2ecd0
-
SHA256
50a666d1501b6aa9961ec1bbe095e019409a540e47e7bd11c0c41a05ab22bd83
-
SHA512
fd64a17ab40d080dd0a571c1dc8a91bd7619b23e2696453ea2ce3302354f8477350039ef390faad28963888597854709d0329e59caab0973400ecebc2f62c6c3
-
SSDEEP
768:stcfZPNmHmBhpuS4513u2HskTQ6QskTQ6:smfZPNRpu959ssQtssQ
Malware Config
Signatures
Files
-
50a666d1501b6aa9961ec1bbe095e019409a540e47e7bd11c0c41a05ab22bd83.dll windows x86
4d46600479b690a5ed6b18628e374bc9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
CreateFileA
VirtualAlloc
GetOEMCP
GetCurrentProcess
GetCommandLineA
lstrlenW
GetCommandLineW
HeapAlloc
HeapFree
GetProcessHeap
GetProcAddress
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetVersionExW
GetLocaleInfoW
CreateFileMappingW
LoadLibraryExW
FindResourceExW
LoadResource
SetLastError
CreateFileW
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileIntW
GetPrivateProfileIntA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetFullPathNameW
GetFullPathNameA
GetLocaleInfoA
LoadLibraryExA
GetUserDefaultLCID
LoadLibraryW
GetUserDefaultLangID
HeapReAlloc
user32
LoadCursorW
LoadCursorA
advapi32
RegOpenKeyA
RegQueryValueExA
Sections
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata5 Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg7 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ