OpenChat
Static task
static1
Behavioral task
behavioral1
Sample
449ffaef1a4c65d3c455c5d6a9e3a10dc84a3de7841388311b99647ca4a54783.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
449ffaef1a4c65d3c455c5d6a9e3a10dc84a3de7841388311b99647ca4a54783.dll
Resource
win10v2004-20221111-en
General
-
Target
449ffaef1a4c65d3c455c5d6a9e3a10dc84a3de7841388311b99647ca4a54783
-
Size
40KB
-
MD5
5057703b83c3b63674d29dafd40b292f
-
SHA1
0101a3ca4875a08d74f5c95b0c73ca145fad9a25
-
SHA256
449ffaef1a4c65d3c455c5d6a9e3a10dc84a3de7841388311b99647ca4a54783
-
SHA512
c3cc65a53f2d9b1d7a1c2df2245c6e250c2abb5f7ee8fb56fa96649983abf84a5f969d5f65cc328af0b1411a1d71928df05131afcfdc487f782c078ebcca7e84
-
SSDEEP
768:PTQL8YW3CV+ua8GWtIYjP7lYeA+0LDnTy3+jL5dzFit9no9:PcwXkeeRN+DnTyOP5dzFino
Malware Config
Signatures
Files
-
449ffaef1a4c65d3c455c5d6a9e3a10dc84a3de7841388311b99647ca4a54783.dll windows x86
ac65190bc6bdf4b10ef152c50a345835
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
TlsAlloc
DisableThreadLibraryCalls
GetLastError
GetDriveTypeA
FileTimeToLocalFileTime
VirtualFree
lstrcmpiA
GetVersion
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
MultiByteToWideChar
RtlUnwind
shlwapi
StrStrIA
Exports
Exports
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ