Static task
static1
Behavioral task
behavioral1
Sample
b70f5c4edb88a6faa115699e914756d234faed1c83847e626e5fddd8ec761a01.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b70f5c4edb88a6faa115699e914756d234faed1c83847e626e5fddd8ec761a01.dll
Resource
win10v2004-20221111-en
General
-
Target
b70f5c4edb88a6faa115699e914756d234faed1c83847e626e5fddd8ec761a01
-
Size
186KB
-
MD5
09a7b44bd3f2956047afb0f62ffae96a
-
SHA1
6ccf4a87ccadf980f9be7ba244658c007ad83554
-
SHA256
b70f5c4edb88a6faa115699e914756d234faed1c83847e626e5fddd8ec761a01
-
SHA512
e6cd0a964795718c2b11a621cc5ef63848d92d27868609b74c8c3875e6379d53c452bcf03af0642f1ca08ffaa15798316646ee90dc9a177bf44966cf161be1a5
-
SSDEEP
3072:0C9iFFDZzQnSuPXlhksv0/9W1grH2K9GNQG67hZDfsrnyQnO3UYuXVkIDD/v3J08:0IPY9GgD6nyQnOkvJDJOyA1fteTWB7VP
Malware Config
Signatures
Files
-
b70f5c4edb88a6faa115699e914756d234faed1c83847e626e5fddd8ec761a01.dll windows x86
921a2c5844d38e15a6be81bbce96de2e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetEnvironmentVariableA
LoadResource
SizeofResource
FindResourceA
OutputDebugStringA
HeapAlloc
GetProcessHeap
user32
wvsprintfA
msvcrt
time
strlen
Sections
.text Size: 1024B - Virtual size: 530B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ