Static task
static1
Behavioral task
behavioral1
Sample
22858340eddffa9b112bdfa4bbfb6b670b01e4610dab44c26cc81cc32e4b577a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22858340eddffa9b112bdfa4bbfb6b670b01e4610dab44c26cc81cc32e4b577a.dll
Resource
win10v2004-20221111-en
General
-
Target
22858340eddffa9b112bdfa4bbfb6b670b01e4610dab44c26cc81cc32e4b577a
-
Size
50KB
-
MD5
6162e876c349b2d4a0adcfb8637a84f0
-
SHA1
6440b450ce08d102efb4621c48d80a7da39d6f43
-
SHA256
22858340eddffa9b112bdfa4bbfb6b670b01e4610dab44c26cc81cc32e4b577a
-
SHA512
ae95d3c4651023574082141babd93aa968b051c991e3e83ef2282bbd4eb347d1fe6285146eb5106f7eee58ca2a61c30659e8f724500893e9ea7b9a051363c62c
-
SSDEEP
768:bNosw/c/kkAJtVEXtUR/mb/1b7skTQ6QskTQ6:bqu/kku29q/mbNb7ssQtssQ
Malware Config
Signatures
Files
-
22858340eddffa9b112bdfa4bbfb6b670b01e4610dab44c26cc81cc32e4b577a.dll windows x86
5e4428706bd81abc10bcb1a0283069c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
VirtualAlloc
CreateFileA
GetVersionExA
UnhandledExceptionFilter
CloseHandle
ReleaseMutex
GetFileAttributesA
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenW
WaitForSingleObject
CreateMutexA
ExitProcess
GetModuleHandleA
GetStartupInfoA
SetErrorMode
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
lstrcpynA
SetUnhandledExceptionFilter
lstrlenA
GetEnvironmentVariableA
GetModuleFileNameA
DeleteCriticalSection
HeapReAlloc
HeapAlloc
SetEvent
CreateEventA
user32
LoadIconA
LoadCursorA
msvcrt
_vsnprintf
advapi32
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Sections
.rdata3 Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text11 Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text10 Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ