Static task
static1
Behavioral task
behavioral1
Sample
f1d7f7957c7ecdf06515d8f9b12bce97c3172a0647cc1f7e7653cffd108e9364.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1d7f7957c7ecdf06515d8f9b12bce97c3172a0647cc1f7e7653cffd108e9364.dll
Resource
win10v2004-20220812-en
General
-
Target
f1d7f7957c7ecdf06515d8f9b12bce97c3172a0647cc1f7e7653cffd108e9364
-
Size
67KB
-
MD5
c4605c0539ff44e7bb8bb9bbe35f1a0a
-
SHA1
aef0fd99ce27a4018dfbbfae3473f0fd3e08f06b
-
SHA256
f1d7f7957c7ecdf06515d8f9b12bce97c3172a0647cc1f7e7653cffd108e9364
-
SHA512
07b630c9c5c31274b333c577e886a89def49d42a3246d822a0d59b1b0aa063d528c72f6d0b74a16855b1a1d5bdb6bb830b2bff9e0f36181102ff0693f543e408
-
SSDEEP
1536:NVVBIqW81Hn1uZVHfbChCDSKI0KjGxxGjKwpO8r:NTeqvHwZ5bC8SKI0K6xxc
Malware Config
Signatures
Files
-
f1d7f7957c7ecdf06515d8f9b12bce97c3172a0647cc1f7e7653cffd108e9364.dll windows x86
12eecc1c338905f943fdc996f4072f45
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
lstrlenW
ExitProcess
GetTickCount
CreateEventW
QueryPerformanceCounter
GlobalMemoryStatus
GetDiskFreeSpaceExW
GetLongPathNameA
Process32First
Process32Next
OpenProcess
OpenThread
SuspendThread
ResumeThread
lstrcpyA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
DeleteFileW
GetModuleFileNameW
CreateDirectoryW
SetFileAttributesW
CreateDirectoryA
SetFileAttributesA
OutputDebugStringW
OutputDebugStringA
GetModuleFileNameA
SetCurrentDirectoryA
GetCommandLineA
GetModuleHandleW
GetTempPathW
GetPriorityClass
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
RaiseException
TerminateThread
CloseHandle
CreateThread
SetThreadPriority
Sleep
GetCurrentProcess
SetPriorityClass
SetErrorMode
oleaut32
GetRecordInfoFromTypeInfo
CreateErrorInfo
VarUI4FromI2
SysReAllocStringLen
OleLoadPictureEx
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ