Static task
static1
Behavioral task
behavioral1
Sample
f6547829a491a830ee64b7bde52d6c1220f266e35d44d5451fc7c616016b0fce.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6547829a491a830ee64b7bde52d6c1220f266e35d44d5451fc7c616016b0fce.dll
Resource
win10v2004-20221111-en
General
-
Target
f6547829a491a830ee64b7bde52d6c1220f266e35d44d5451fc7c616016b0fce
-
Size
202KB
-
MD5
0b34bdd003081a3bff9bd844ed469460
-
SHA1
f9e6174b8b31e33ae28a1ba89370928f42ff8671
-
SHA256
f6547829a491a830ee64b7bde52d6c1220f266e35d44d5451fc7c616016b0fce
-
SHA512
b759fefd660f36482078b2e1190cbf89f79363dc4558b9d341e183638430c18f00eb95d1577fafab46982dfdfc4b1a6c9e7ad992576a5b986b56c2634d3e9d42
-
SSDEEP
3072:cWRhGlwKcqjdKRNbA+Pz+PySkXnebSk+YO7fMprMa:pIC8oJ6ySkXgI0h
Malware Config
Signatures
Files
-
f6547829a491a830ee64b7bde52d6c1220f266e35d44d5451fc7c616016b0fce.dll windows x86
820ab24e53af2dbafc74d24f87e40262
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.perplex Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE