compatWebRpl
Static task
static1
Behavioral task
behavioral1
Sample
bc5640e2864d9c29e9b2168603c0d02f9c25bb32bbfa5d84824be654a712fcff.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc5640e2864d9c29e9b2168603c0d02f9c25bb32bbfa5d84824be654a712fcff.dll
Resource
win10v2004-20221111-en
General
-
Target
bc5640e2864d9c29e9b2168603c0d02f9c25bb32bbfa5d84824be654a712fcff
-
Size
152KB
-
MD5
c4eacac172d05da1b77a253168480f08
-
SHA1
a87cd82aab4a89aa34e05db48d843e1476681bf7
-
SHA256
bc5640e2864d9c29e9b2168603c0d02f9c25bb32bbfa5d84824be654a712fcff
-
SHA512
b9550f087fca173f4a8aee1334b43ab6eedf641b775e2de406e7da2a9d2c1397bf99d2b76f5ad5fadbd4c3467adbcf2dc5738f464f5383459c3b90d70e8a986b
-
SSDEEP
3072:+Mu/rGIYlSZwx8rBc7xLQQcDqZ/ZugLqfxWua/gJJuIFmvTH1:USI6Cc9LQdG1ZuFfcOJ0Io
Malware Config
Signatures
Files
-
bc5640e2864d9c29e9b2168603c0d02f9c25bb32bbfa5d84824be654a712fcff.dll windows x86
a0ac6bbdd531f7287f438cd57380be4b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GlobalAlloc
GetProcAddress
user32
TranslateMessage
RegisterWindowMessageA
GetSystemMetrics
GetWindowLongA
PostQuitMessage
advapi32
DuplicateTokenEx
OpenProcessToken
Exports
Exports
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 493B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ