Static task
static1
Behavioral task
behavioral1
Sample
7586e1cfdd237723852d74c4ffb355c83343d00282a7a1dbb38729f3df285413.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7586e1cfdd237723852d74c4ffb355c83343d00282a7a1dbb38729f3df285413.dll
Resource
win10v2004-20220812-en
General
-
Target
7586e1cfdd237723852d74c4ffb355c83343d00282a7a1dbb38729f3df285413
-
Size
54KB
-
MD5
844f277624e309917f244f0d44578028
-
SHA1
6930fe29e2e348382f4095f989e85aa0792fa9d4
-
SHA256
7586e1cfdd237723852d74c4ffb355c83343d00282a7a1dbb38729f3df285413
-
SHA512
68a209413841ec76e59b638a4241cdaefaec9a7c240b13f3aefbd56001efdf51bcd2b1af84a1a1cc30a7fe8086b26d8ea45f115dfe6ebabc89341f42b1aa5ccd
-
SSDEEP
768:lTbxTgUxy3aRnXhX6SGBYJK01KGfH7iGEgnom0CiVtj7nqTZadSJBYb:lT10UxxXUSwGS2H7pbomRSqVJBYb
Malware Config
Signatures
Files
-
7586e1cfdd237723852d74c4ffb355c83343d00282a7a1dbb38729f3df285413.dll windows x86
ad6c0ae44664c4d956992135685ee547
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetModuleFileNameA
GetProcAddress
GetVersion
GetStartupInfoA
VirtualAlloc
VirtualProtect
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
GetACP
GetVersionExA
Sleep
GetCurrentThreadId
GetLastError
GetProcessHeap
QueryPerformanceFrequency
user32
GetCursor
IsWindowUnicode
GetWindowRect
IsCharLowerA
IsCharUpperA
GetWindowRgn
GetWindowDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetDlgItem
GetAncestor
GetWindow
GetLastActivePopup
IsIconic
IsWindowVisible
GetGUIThreadInfo
GetParent
GetDesktopWindow
IsChild
InSendMessage
advapi32
InitializeSecurityDescriptor
IsValidAcl
GetUserNameA
RevertToSelf
msvcrt
malloc
_initterm
free
memmove
_swab
_set_error_mode
rand
_CIsinh
_CIfmod
_CIacos
_itoa
_adjust_fdiv
ldiv
ceil
_pctype
_isctype
ldexp
__mb_cur_max
floor
div
_ltoa
gdi32
GdiFlush
GetROP2
GetBkColor
GetBkMode
GetBitmapDimensionEx
ole32
CoFileTimeNow
CoGetCurrentProcess
shell32
ord524
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ