SystemMobileTime
Static task
static1
Behavioral task
behavioral1
Sample
c20b6dd70a0a9e044491a03397c060d4a92c17239ecf8061e546db1980e38f4c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c20b6dd70a0a9e044491a03397c060d4a92c17239ecf8061e546db1980e38f4c.dll
Resource
win10v2004-20220812-en
General
-
Target
c20b6dd70a0a9e044491a03397c060d4a92c17239ecf8061e546db1980e38f4c
-
Size
88KB
-
MD5
a2c2ae09516cbc0b46974732556b479e
-
SHA1
fa1ab54d944c1a8ab60b49db9dfc20261df128e8
-
SHA256
c20b6dd70a0a9e044491a03397c060d4a92c17239ecf8061e546db1980e38f4c
-
SHA512
33d824cc476a2d85a6186c4fd2ec916b77685141e0c50ab93c0e9e0c1c04f9fb8e342c05d3f3f2c9479b765609df170dfa3e66b2991c105f0e62565eebd69256
-
SSDEEP
1536:HoT215J/k7jlZDwB1oe2WMVtHL2XAFbLO03Khil:Iy8lZDQ1oDVtHL2QF37Wil
Malware Config
Signatures
Files
-
c20b6dd70a0a9e044491a03397c060d4a92c17239ecf8061e546db1980e38f4c.dll windows x86
4d5e8f04bacd0db398acca8c3be118b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExW
ReleaseActCtx
GetUserDefaultLCID
HeapSize
RemoveDirectoryA
FindVolumeMountPointClose
GlobalMemoryStatusEx
FileTimeToLocalFileTime
SetCommState
LoadLibraryA
EnumUILanguagesW
ClearCommBreak
GetProcAddress
ole32
OleGetAutoConvert
CoCreateGuid
user32
LookupIconIdFromDirectory
GetWindowWord
OpenWindowStationA
GetDesktopWindow
IsCharAlphaW
IsZoomed
DestroyAcceleratorTable
oleaut32
SysStringLen
shlwapi
StrToIntA
StrFormatByteSizeW
advapi32
MakeAbsoluteSD
RegEnumKeyA
RegCreateKeyW
SetThreadToken
RegDeleteKeyW
shell32
SHGetSpecialFolderLocation
gdi32
InvertRgn
GetRgnBox
Polygon
SelectPalette
SetLayout
BitBlt
GetRandomRgn
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ