Static task
static1
Behavioral task
behavioral1
Sample
4858133bce8a92c8601018136ee9952296ea99439c6dc80890c5960df344fa39.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4858133bce8a92c8601018136ee9952296ea99439c6dc80890c5960df344fa39.dll
Resource
win10v2004-20220812-en
General
-
Target
4858133bce8a92c8601018136ee9952296ea99439c6dc80890c5960df344fa39
-
Size
70KB
-
MD5
e760d0b1a474a031e557681003c94fd0
-
SHA1
abc0350f50883e0e207f1c5a5047f2de1690dcd7
-
SHA256
4858133bce8a92c8601018136ee9952296ea99439c6dc80890c5960df344fa39
-
SHA512
3e00a49cd472af4b43245763b9df363dd6e0a915a5063c60309265bdd599a46b19a0b86c39d9081bac87f82bb08567c494177079a7d646274d3042934b684d8d
-
SSDEEP
1536:lV6Teu8dUSN3O7yo3ut3Z5OdKf+EGXrzBI:lQOyCeWD5O6GXrzS
Malware Config
Signatures
Files
-
4858133bce8a92c8601018136ee9952296ea99439c6dc80890c5960df344fa39.dll windows x86
262a03f935d312f0ba006571067752e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ExitThread
FlushFileBuffers
GetFileSize
GetSystemTimeAsFileTime
OpenFile
ReadFile
UnmapViewOfFile
VirtualAlloc
lstrcmpA
lstrcmpiA
msvcrt
__getmainargs
__p__commode
fwprintf
strpbrk
wcscat
wcscmp
wcscpy
wcslen
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 907B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ