Static task
static1
Behavioral task
behavioral1
Sample
932acb199b7520e2945162e4d514c634c1e05483004985e4367b8fb56c1f7784.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
932acb199b7520e2945162e4d514c634c1e05483004985e4367b8fb56c1f7784.dll
Resource
win10v2004-20221111-en
General
-
Target
932acb199b7520e2945162e4d514c634c1e05483004985e4367b8fb56c1f7784
-
Size
99KB
-
MD5
312fe8b674ef3faa475698cf44cc1fce
-
SHA1
16e4eda1c3adc425bd580d35386b7f0d61adc098
-
SHA256
932acb199b7520e2945162e4d514c634c1e05483004985e4367b8fb56c1f7784
-
SHA512
80960bcb7d6ffdc76ec318ec31f3b959be5bb5168f00f7e9c0cd10bea8f9758af01e1bf2757cbc77d7a7fb1edfb4ccd18fc8c85ff34983ef388146acb0e4e00c
-
SSDEEP
1536:b/U845pZFIOVlf16yu3e2onUnYs/iMIgIGlk7XGN0nPAly3WYEgmina39cJGHvlQ:+p1Vlf16yu1oki+Ujsut3WgaNc0fC
Malware Config
Signatures
Files
-
932acb199b7520e2945162e4d514c634c1e05483004985e4367b8fb56c1f7784.dll windows x86
23c313944a68b1a718fa542db1fa52ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ConvertDefaultLocale
CreateFileMappingA
EndUpdateResourceA
GetCommandLineA
GetEnvironmentStringsW
GetFileTime
GetTimeFormatA
GetVersionExA
HeapAlloc
HeapCreate
LCMapStringA
LocalAlloc
ReleaseMutex
SetFileAttributesA
user32
ClientToScreen
CreateDialogIndirectParamA
DefWindowProcA
DrawTextA
DrawTextExA
GetActiveWindow
GetClassInfoA
GetClassLongA
GetDesktopWindow
GetMessageA
GetNextDlgGroupItem
GetParent
GetSubMenu
GetWindowPlacement
OffsetRect
PostQuitMessage
SetDlgItemTextA
SetFocus
SetWindowsHookExA
ShowWindow
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ