Static task
static1
Behavioral task
behavioral1
Sample
a290968f5035bd1ef74e7951e3fa3a074e3d572c3d901c6b7b1e061ee78bf360.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a290968f5035bd1ef74e7951e3fa3a074e3d572c3d901c6b7b1e061ee78bf360.dll
Resource
win10v2004-20220812-en
General
-
Target
a290968f5035bd1ef74e7951e3fa3a074e3d572c3d901c6b7b1e061ee78bf360
-
Size
82KB
-
MD5
655ad73b6ce8f7b15d5e87cd92f7cabc
-
SHA1
bc45e06e6be44bb57a75658b0e78372f30fe5790
-
SHA256
a290968f5035bd1ef74e7951e3fa3a074e3d572c3d901c6b7b1e061ee78bf360
-
SHA512
70660cd79b11ef17dacc497998c84e95b2aa2062cac1571c93f20cbb3474c1846b32ab4de38be2f579d31ac33ccb7aa4bb6ae70d6bb45fb7a4b20520506e84a9
-
SSDEEP
1536:OFDC3bbALOL8rZqUta8W+vfhHuonBCDdt/9lqX7Fdn7AnF:u0bWOL8r8UttW+vfhHHBCDdtFlK8nF
Malware Config
Signatures
Files
-
a290968f5035bd1ef74e7951e3fa3a074e3d572c3d901c6b7b1e061ee78bf360.dll windows x86
5927548e2068f39af182d7b49e24fafc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetModuleFileNameA
GetProcAddress
GetUserDefaultLCID
LoadLibraryA
VirtualProtect
DosDateTimeToFileTime
GetTickCount
IsDBCSLeadByte
SetLastError
Sleep
GetCurrentThreadId
IsBadStringPtrA
VirtualAlloc
GetProcessHeap
user32
GetWindowThreadProcessId
GetWindowInfo
GetWindow
GetAncestor
GetCursor
GetMenuContextHelpId
GetWindowContextHelpId
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
IsCharUpperA
IsCharAlphaA
GetWindowDC
IsZoomed
GetGUIThreadInfo
BlockInput
GetDC
IsClipboardFormatAvailable
GetIconInfo
advapi32
IsValidSid
IsValidSecurityDescriptor
InitializeSecurityDescriptor
msvcrt
_itoa
__mb_cur_max
modf
_adjust_fdiv
malloc
_initterm
free
_memicmp
_memccpy
_ultoa
srand
_set_error_mode
ldiv
_CIcosh
_CIacos
time
localeconv
_pctype
_isctype
_errno
gdi32
GetPixel
GetStretchBltMode
ole32
CoFileTimeNow
CoDosDateTimeToFileTime
CoRevertToSelf
shell32
DuplicateIcon
ord680
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ