fx
Static task
static1
Behavioral task
behavioral1
Sample
95a6870bef3d606fca345797c695b5e70b9ae63bbdaa5c62ed6317e3ba368fb3.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
95a6870bef3d606fca345797c695b5e70b9ae63bbdaa5c62ed6317e3ba368fb3.dll
Resource
win10v2004-20220812-en
General
-
Target
95a6870bef3d606fca345797c695b5e70b9ae63bbdaa5c62ed6317e3ba368fb3
-
Size
10KB
-
MD5
4315a4c53c1da178d0453da97d18f2a1
-
SHA1
016797b99acaa731b2fcc3a97eb2f3fbae94e74a
-
SHA256
95a6870bef3d606fca345797c695b5e70b9ae63bbdaa5c62ed6317e3ba368fb3
-
SHA512
f00173ec650dad3b7ab938510d6810089176f247a8808fdd72adb133921c8203d9041f3a4e5820324d1ac188c27a326d4c9c117aca685e4d1670cc98a61c643f
-
SSDEEP
192:fajKaOupvKEZukHkqcYB8OFZ1h4AbaE1OkJ3P/Mzo:flaOuBukHkqc81PAAbaE1O0nM
Malware Config
Signatures
Files
-
95a6870bef3d606fca345797c695b5e70b9ae63bbdaa5c62ed6317e3ba368fb3.dll windows x86
b70a03014e3f891e1ee29a324cd186ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
Sleep
GetCurrentProcessId
GetLastError
CreateMutexA
GetModuleFileNameA
GetCurrentProcess
GlobalFree
ReadProcessMemory
GlobalLock
GlobalAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
WriteProcessMemory
ExitProcess
GlobalUnlock
GetComputerNameA
user32
SetWindowsHookExA
FindWindowA
CallNextHookEx
GetWindowTextA
GetWindowThreadProcessId
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
msvcrt
_adjust_fdiv
malloc
_initterm
_stricmp
free
strcmp
sprintf
strrchr
??3@YAXPAX@Z
memcpy
memset
??2@YAPAXI@Z
strncpy
strchr
strlen
strcpy
fclose
fread
fopen
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdat Size: 512B - Virtual size: 269B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 778B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ