service
Static task
static1
Behavioral task
behavioral1
Sample
121cdcab7625028302127c3c6be983a5b178e66abdcea8b971378cf4cc5c34a6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
121cdcab7625028302127c3c6be983a5b178e66abdcea8b971378cf4cc5c34a6.dll
Resource
win10v2004-20221111-en
General
-
Target
121cdcab7625028302127c3c6be983a5b178e66abdcea8b971378cf4cc5c34a6
-
Size
27KB
-
MD5
a2bea365450d144af895b31366d4c6c0
-
SHA1
37472b5e39811db22574b620892a7836877f2085
-
SHA256
121cdcab7625028302127c3c6be983a5b178e66abdcea8b971378cf4cc5c34a6
-
SHA512
2bcb601d7f2290d9882f2984e6c148284b8297553042ced3c29097ccaa0fcf5008cc94bbdc6de2fbbf45076702338fef34073de142696f9ef012e9ca03a96b84
-
SSDEEP
768:L9DeRT1rTrv8Xtlc8xiq9OKPR0XKg/YckRMVhbsaD:pDqprEX7Dxio6XKM9koh7
Malware Config
Signatures
Files
-
121cdcab7625028302127c3c6be983a5b178e66abdcea8b971378cf4cc5c34a6.dll windows x86
112fe8db160a6a3928828e24a2df9294
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileSize
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
Sleep
VirtualAlloc
Exports
Exports
Sections
.flat Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE