Static task
static1
Behavioral task
behavioral1
Sample
305372b64e0dc466fbc67757745fa53180bb066319fc4b0cfe0f7e56558c460b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
305372b64e0dc466fbc67757745fa53180bb066319fc4b0cfe0f7e56558c460b.dll
Resource
win10v2004-20220901-en
General
-
Target
305372b64e0dc466fbc67757745fa53180bb066319fc4b0cfe0f7e56558c460b
-
Size
68KB
-
MD5
eec6c6bda4c46a42861b2c509b0fb470
-
SHA1
3ccaafa73235f3a6382f1b1eb35a2da235615af1
-
SHA256
305372b64e0dc466fbc67757745fa53180bb066319fc4b0cfe0f7e56558c460b
-
SHA512
273dd46c78aa52a1dd729ea71a159b1119e6f1e2a5167b0d92fb574c5fcf156389347e67df2255e4a44adccdd56454848561551c3d05c34b9ce0090a3c5156c9
-
SSDEEP
1536:kkBdcTw76AVkMgbMENwbp+Vby/Jn0q/mWjxBuGpd3zjD9:dxOzNwbp+dyZb/bj66zF
Malware Config
Signatures
Files
-
305372b64e0dc466fbc67757745fa53180bb066319fc4b0cfe0f7e56558c460b.dll windows x86
6f069b236a222984adcfa511bd42a5dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
EnumResourceLanguagesA
ExitProcess
ExitThread
GetStartupInfoA
GetTimeFormatA
LoadResource
MapViewOfFile
TlsGetValue
VirtualAlloc
lstrcmpA
msvcrt
wcscpy
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ