api
Static task
static1
Behavioral task
behavioral1
Sample
b63b11bc8f59ce7e929e82e42e66236385c9540a2a951553e95d7bee1d61dd9a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b63b11bc8f59ce7e929e82e42e66236385c9540a2a951553e95d7bee1d61dd9a.dll
Resource
win10v2004-20221111-en
General
-
Target
b63b11bc8f59ce7e929e82e42e66236385c9540a2a951553e95d7bee1d61dd9a
-
Size
139KB
-
MD5
902b8946075f9d4802c2b8ef37e8f5fd
-
SHA1
8979b1fd0384d4843b4094a5ddac0b83ca231b5b
-
SHA256
b63b11bc8f59ce7e929e82e42e66236385c9540a2a951553e95d7bee1d61dd9a
-
SHA512
0e2e7fc23a49b33fe18f8a140b6ca3111503d6f518ec5912f5cc8fe5d60dd3c82522f77557a71ac0be6c85def85e4f10dfabca9e33aec7c2ca7e9b0300c7db6e
-
SSDEEP
1536:GVqfVwBHU+cX+OoAbxthnPwhyUWXECuRb+WxKZzvtgCuVuTcNkRQ4lvA0LYSimsq:y00H/4tHQvYSRAf8Hnm/Rl
Malware Config
Signatures
Files
-
b63b11bc8f59ce7e929e82e42e66236385c9540a2a951553e95d7bee1d61dd9a.dll windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ