tiantang
Static task
static1
Behavioral task
behavioral1
Sample
20070d3fcc66b7ae7a592af201955f4a59edd599795eebda9301f6c96e11b6a1.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
20070d3fcc66b7ae7a592af201955f4a59edd599795eebda9301f6c96e11b6a1.dll
Resource
win10v2004-20220812-en
General
-
Target
20070d3fcc66b7ae7a592af201955f4a59edd599795eebda9301f6c96e11b6a1
-
Size
32KB
-
MD5
6c177fb5ae7fbe107eaabedb2d3b5955
-
SHA1
d505629245cade842d0a714b637936e142382b83
-
SHA256
20070d3fcc66b7ae7a592af201955f4a59edd599795eebda9301f6c96e11b6a1
-
SHA512
8df158163c8997f90378c5acafb0a3dad2b5bce0d3a46efe49f06e380e1d7bc802e48ca3a6b5fe0809907705def06b34c74361fe5f142fa59b18580b535c1898
-
SSDEEP
384:2X3olrzqyAd+9O4Yz/Gj0gKlLAiXy4eCWJ25jX:2X3olrzXAeO1uj/bXJ2x
Malware Config
Signatures
Files
-
20070d3fcc66b7ae7a592af201955f4a59edd599795eebda9301f6c96e11b6a1.dll windows x86
c620e7b3c6c02e94d2c8f049151f82b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
_strnicmp
_initterm
_ftol
strncpy
modf
malloc
free
sprintf
strncmp
tolower
user32
wsprintfA
MessageBoxA
SetWindowTextA
GetForegroundWindow
GetWindowThreadProcessId
GetClassNameA
GetWindowTextA
IsWindowVisible
GetWindow
GetDesktopWindow
SetTimer
KillTimer
kernel32
IsBadReadPtr
Module32First
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
MapViewOfFile
RtlMoveMemory
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
LCMapStringA
GetModuleFileNameA
OpenFileMappingA
HeapFree
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 450B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ