Trace
Static task
static1
Behavioral task
behavioral1
Sample
2699b52dfc3fba97df817aa496bec0c41172e7dd5ddb0fd972b0f5dd1d632f59.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2699b52dfc3fba97df817aa496bec0c41172e7dd5ddb0fd972b0f5dd1d632f59.dll
Resource
win10v2004-20220812-en
General
-
Target
2699b52dfc3fba97df817aa496bec0c41172e7dd5ddb0fd972b0f5dd1d632f59
-
Size
4KB
-
MD5
fb2f2d14a207055cf746150f654fc4a0
-
SHA1
08cc34037d98ca8b0a6f1b1157cc8e72d66931a2
-
SHA256
2699b52dfc3fba97df817aa496bec0c41172e7dd5ddb0fd972b0f5dd1d632f59
-
SHA512
0fb1660b447686f67627f222b325920118947541aa8559d4bd5ea8a7c1839f305efdd345a52bebcb78c2635b109d8e3e1fdcca82c94749c0d036c3c75a0c47a9
Malware Config
Signatures
Files
-
2699b52dfc3fba97df817aa496bec0c41172e7dd5ddb0fd972b0f5dd1d632f59.dll windows x86
1467011fd574881a37f97fc6726fb25e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetTempPathA
CloseHandle
CreateFileA
GetCommandLineA
GetModuleHandleA
GetProcAddress
lstrlenA
IsBadReadPtr
ReadFile
WriteFile
lstrcatA
lstrcpyA
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 943B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 142B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ