Static task
static1
Behavioral task
behavioral1
Sample
42263653759f716a9165733ce0643fd2fee0fc3c2ff5016d6b2f2292804858d4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
42263653759f716a9165733ce0643fd2fee0fc3c2ff5016d6b2f2292804858d4.dll
Resource
win10v2004-20220901-en
General
-
Target
42263653759f716a9165733ce0643fd2fee0fc3c2ff5016d6b2f2292804858d4
-
Size
35KB
-
MD5
4265e31ab36ae1b8d3d7ac83a072b0a0
-
SHA1
76d3f79c4c2310603f2c629ae48e310b9bf47e5b
-
SHA256
42263653759f716a9165733ce0643fd2fee0fc3c2ff5016d6b2f2292804858d4
-
SHA512
7b40cd695f15c20ea6f13f422829131077c7c247c510a0c41c5d49db8c1dda3b22831f20baa9492fab3f8ec2a1e57ff1577334c500838d2ef73755697b51e941
-
SSDEEP
768:8yvARl+/0PA6v0RofqwRayGUES5xISPwDl3fp3:8yB0PA6cRwhGOISPwDdf
Malware Config
Signatures
Files
-
42263653759f716a9165733ce0643fd2fee0fc3c2ff5016d6b2f2292804858d4.dll windows x86
171f93736964ad1d56f716008a771a26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
IsDebuggerPresent
user32
GetKeyboardType
advapi32
RegQueryValueExA
OpenProcessToken
oleaut32
SysFreeString
wsock32
ntohs
Sections
.text Size: 34KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE