Static task
static1
Behavioral task
behavioral1
Sample
5e3062c3b3904d5b4477884f16885728b7a141639376c063922d2c7173aa7bc6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5e3062c3b3904d5b4477884f16885728b7a141639376c063922d2c7173aa7bc6.dll
Resource
win10v2004-20220901-en
General
-
Target
5e3062c3b3904d5b4477884f16885728b7a141639376c063922d2c7173aa7bc6
-
Size
27KB
-
MD5
30ae09d5a75f3bd1621d49c5306155d0
-
SHA1
a6846cdf853f8cb2ef03a8eb210d07cea712651e
-
SHA256
5e3062c3b3904d5b4477884f16885728b7a141639376c063922d2c7173aa7bc6
-
SHA512
915eac961631a20441b0cccb1a69e697da828a2798eb1fc4dc451cb4bc49438951e89c2e5f1ec28e9929c546ab87a55d1f5dd1be1755f9e828e2ea17ddffe405
-
SSDEEP
384:/3PP8PGAI9Tpxx1Qb1QM+b1/n6PzbMfSty:/MvqPaW56J0
Malware Config
Signatures
Files
-
5e3062c3b3904d5b4477884f16885728b7a141639376c063922d2c7173aa7bc6.dll windows x86
d39aec45e6857f0a9efd3a52838cb6e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
CloseHandle
CreateFileA
WriteFile
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
LocalFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
FlushFileBuffers
SetStdHandle
SetFilePointer
gdi32
GetObjectA
DeleteDC
CreateCompatibleDC
GetDeviceCaps
DeleteObject
GetDIBits
SelectObject
CreateDCA
BitBlt
CreateCompatibleBitmap
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 917B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rebld_i Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE