Static task
static1
Behavioral task
behavioral1
Sample
b1d72f730f76c46470227f5ae64b35bf8b56de14c749612a041655e5d87407d9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1d72f730f76c46470227f5ae64b35bf8b56de14c749612a041655e5d87407d9.dll
Resource
win10v2004-20220812-en
General
-
Target
b1d72f730f76c46470227f5ae64b35bf8b56de14c749612a041655e5d87407d9
-
Size
164KB
-
MD5
850b1277c593c26d670e98f41c03d1f0
-
SHA1
5ba4e482b3b960494268c4ce0c079ddc1801799d
-
SHA256
b1d72f730f76c46470227f5ae64b35bf8b56de14c749612a041655e5d87407d9
-
SHA512
5f8751e7b6e0f9632e848c8b882a5ead75959b0e72dac676ac41939d4fbcd2a49d315c619dcc4c6c09f6144ba26483b8ee1910ff8056bddce6e5bd8ff4e504a8
-
SSDEEP
3072:pHNhHzNaPMmRsZTPjNeq8hfMsV60HixKF+/C9yHC5ta0mk5RxH:pPHZa98TxE8A+/GyHCRmUHH
Malware Config
Signatures
Files
-
b1d72f730f76c46470227f5ae64b35bf8b56de14c749612a041655e5d87407d9.dll windows x86
73e65d0e64dc9899e4cb37e6e899f4b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetProcAddress
GetVersion
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetLocalTime
VirtualAlloc
VirtualProtect
VirtualQuery
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LoadLibraryA
Sleep
IsDebuggerPresent
SetLastError
GetLastError
GetProcessHeap
GetCurrentThreadId
user32
GetCursor
IsWindowUnicode
GetClientRect
GetWindowTextLengthA
IsCharAlphaNumericA
IsClipboardFormatAvailable
GetDC
WindowFromDC
GetIconInfo
CopyIcon
GetAncestor
GetWindow
GetTopWindow
IsZoomed
IsIconic
GetGUIThreadInfo
GetParent
GetDesktopWindow
InSendMessage
IsMenu
IsChild
advapi32
InitializeSecurityDescriptor
IsValidAcl
GetUserNameA
RevertToSelf
msvcrt
_adjust_fdiv
malloc
_initterm
free
memmove
_swab
_memccpy
_ultoa
srand
_set_error_mode
_errno
_CIpow
_itoa
ldiv
time
ldexp
ceil
_pctype
_isctype
__mb_cur_max
rand
gdi32
GetStretchBltMode
GdiGetBatchLimit
GetROP2
GetBkColor
ole32
CoFileTimeNow
CoGetCurrentProcess
shell32
ord66
DuplicateIcon
ord524
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ