?IsNotProjectOriginal@@IJPAXPADPAF@X
Static task
static1
Behavioral task
behavioral1
Sample
d25ecb904fcf5091d783556e8ec4d892d36fb743969b6fc11dba4ed7437ed0fc.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d25ecb904fcf5091d783556e8ec4d892d36fb743969b6fc11dba4ed7437ed0fc.dll
Resource
win10v2004-20220812-en
General
-
Target
d25ecb904fcf5091d783556e8ec4d892d36fb743969b6fc11dba4ed7437ed0fc
-
Size
57KB
-
MD5
78613a53b92c6950e00622f5c8f7655b
-
SHA1
49caa904661a482488c86c45c723139b9144bba5
-
SHA256
d25ecb904fcf5091d783556e8ec4d892d36fb743969b6fc11dba4ed7437ed0fc
-
SHA512
7487c876183400f996f420673fe77f31bcd47bd752ad26216df1d3769a196c927c9866a9f96fb0ae6e46e6c26c1689acdd813342dd731f261b34640972fdea66
-
SSDEEP
1536:qh3cGUjj6BDTJyRAYy1eMOox4Qor5DOzAUL:sA6BXwq1eMOSzAw
Malware Config
Signatures
Files
-
d25ecb904fcf5091d783556e8ec4d892d36fb743969b6fc11dba4ed7437ed0fc.dll windows x86
aa999394d62956635ccd763cba323dc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathStripToRootW
kernel32
GetModuleFileNameA
GetModuleHandleA
user32
InvalidateRgn
Exports
Exports
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.uid Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE