Static task
static1
Behavioral task
behavioral1
Sample
84ef696389ae426560dff65a7750b7140219e72c6d11fd632e70ff4b3931b489.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84ef696389ae426560dff65a7750b7140219e72c6d11fd632e70ff4b3931b489.dll
Resource
win10v2004-20221111-en
General
-
Target
84ef696389ae426560dff65a7750b7140219e72c6d11fd632e70ff4b3931b489
-
Size
53KB
-
MD5
ee151a242c91c207177da60f1b3c9e13
-
SHA1
034c24e59020a28ac10285c74e4e7c5ceaa4b3fd
-
SHA256
84ef696389ae426560dff65a7750b7140219e72c6d11fd632e70ff4b3931b489
-
SHA512
6deaca2cad0cac08f9d03a32dc055733edf77d1fc7a1ee25eed4cbd51be07b5de8b8ce8be34288e1c7011f1be2b78756308baf82a1aefe0793d0d74f3c957f34
-
SSDEEP
1536:FGn1hqSDQ5ky4gQhbu9sy/jbscDD/9tPl:6hzokyhUGsy/j4cDDVT
Malware Config
Signatures
Files
-
84ef696389ae426560dff65a7750b7140219e72c6d11fd632e70ff4b3931b489.dll windows x86
820ab24e53af2dbafc74d24f87e40262
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
PESHiELD Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESHiELD Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE