Static task
static1
Behavioral task
behavioral1
Sample
a4c3fc52a7d227c7bab88659d1074c0fffc9e76195ad232b44318386d3dc3b8d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4c3fc52a7d227c7bab88659d1074c0fffc9e76195ad232b44318386d3dc3b8d.dll
Resource
win10v2004-20221111-en
General
-
Target
a4c3fc52a7d227c7bab88659d1074c0fffc9e76195ad232b44318386d3dc3b8d
-
Size
39KB
-
MD5
3f96b04fa27d42f4487364b4adf55c28
-
SHA1
662bca7b79ec8c23eb3dd4a7ffdb8a1f1d43e442
-
SHA256
a4c3fc52a7d227c7bab88659d1074c0fffc9e76195ad232b44318386d3dc3b8d
-
SHA512
ee108a5221ffdf54b9e115b3cbc6521418f5d6ffcaf70cb54be782b1479446fb9e9235aa86cace27dfd8281aa8b026bad8339bedc9c5c95c5d60b75833f5679f
-
SSDEEP
768:8hLa4m/I5ERMHrx/WewgjQwcB15ce6hyC9wRC7anhmhd+SBZAxDGs:85FA0kJB1qdyC9wSahTSwgs
Malware Config
Signatures
Files
-
a4c3fc52a7d227c7bab88659d1074c0fffc9e76195ad232b44318386d3dc3b8d.dll windows x86
badaf4429590604f1467880e6380e7df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteKeyA
SHGetValueW
SHQueryValueExA
SHQueryValueExW
SHEnumKeyExA
SHDeleteEmptyKeyA
PathIsRootA
kernel32
HeapFree
GetProcessHeap
HeapAlloc
GetStartupInfoA
Beep
CloseHandle
CompareStringA
OpenEventA
CreateFileMappingA
DeleteFileA
GetExitCodeProcess
GetNamedPipeInfo
GetUserDefaultLCID
ReleaseMutex
ReleaseSemaphore
ExitProcess
GetFileType
CallNamedPipeA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetWindowsDirectoryA
GetSystemDirectoryW
GetCurrentDirectoryW
GetDriveTypeA
ole32
OleRun
user32
ReleaseDC
advapi32
GetUserNameA
RegLoadKeyA
msvcrt
toupper
winmm
OpenDriver
SendDriverMessage
timeBeginPeriod
timeEndPeriod
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data4 Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data3 Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data2 Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 598B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ