setup
Static task
static1
Behavioral task
behavioral1
Sample
c56fd35f5b7fc428dfbd1b3c5e7c134258af56d83deeb50185dce94bf64dbf4d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c56fd35f5b7fc428dfbd1b3c5e7c134258af56d83deeb50185dce94bf64dbf4d.dll
Resource
win10v2004-20221111-en
General
-
Target
c56fd35f5b7fc428dfbd1b3c5e7c134258af56d83deeb50185dce94bf64dbf4d
-
Size
346KB
-
MD5
457881e837abc65ea8ec8cdc85975310
-
SHA1
3ea58cf17d6fdc840057a0dbfbead65430616bdd
-
SHA256
c56fd35f5b7fc428dfbd1b3c5e7c134258af56d83deeb50185dce94bf64dbf4d
-
SHA512
4584ea504f53b8fd6e60656210036204f30325cfc6706c1985a0e1bfb3bfb3cc00bc3b863209bead533e79cc826cebf5e909eab85db110a3744bfebbf4980d60
-
SSDEEP
6144:moOeFMEKezjh42PbevSu2etT/UWWOQK7DA9rassbV38JTKF:moOFEN5eSByT/jfXADWVsJ
Malware Config
Signatures
Files
-
c56fd35f5b7fc428dfbd1b3c5e7c134258af56d83deeb50185dce94bf64dbf4d.dll windows x86
fd75e6c72afdb41462213e78749d3934
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadStringA
advapi32
InitializeSecurityDescriptor
ole32
CoInitialize
oleaut32
VarUI4FromStr
setupapi
SetupIterateCabinetA
comctl32
InitCommonControlsEx
Exports
Exports
Sections
.text Size: 331KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE