Static task
static1
Behavioral task
behavioral1
Sample
ff00c0f89abb9e287966d0dab9087730a31b0a2dfb4ec47c9ac49ce66b4bdb9c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff00c0f89abb9e287966d0dab9087730a31b0a2dfb4ec47c9ac49ce66b4bdb9c.dll
Resource
win10v2004-20220901-en
General
-
Target
ff00c0f89abb9e287966d0dab9087730a31b0a2dfb4ec47c9ac49ce66b4bdb9c
-
Size
170KB
-
MD5
1183a3ea481cba84fb8ed320438f02d0
-
SHA1
08450abbe735864cdd1935350f7421773477b2c1
-
SHA256
ff00c0f89abb9e287966d0dab9087730a31b0a2dfb4ec47c9ac49ce66b4bdb9c
-
SHA512
36cce1022ded0f1a857fd8af91d283d970f987adecd3f40d7fe81abbc4092f4cb5d94affe926bf1b889b5de3ac27bbf9f7043dfeabb676a7fac2d888c141c057
-
SSDEEP
3072:KspxlQcN/83Kv59auHAI9OKkEorWJYrseXspzPhRLx4sRb666I:KaxlB1hvDYI9XdWKzPhZ2rG
Malware Config
Signatures
Files
-
ff00c0f89abb9e287966d0dab9087730a31b0a2dfb4ec47c9ac49ce66b4bdb9c.dll windows x86
d3f108b4413d801ddd1b54a7864e621f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
Sleep
GetACP
LoadLibraryA
InterlockedDecrement
InterlockedExchange
IsBadWritePtr
GetProcAddress
GetUserDefaultLCID
MulDiv
VirtualAlloc
VirtualProtect
GetTickCount
IsBadReadPtr
GetModuleFileNameA
GetProcessHeap
user32
GetCursor
GetWindowRect
GetWindowTextA
IsCharLowerA
IsCharUpperA
GetWindowRgn
GetForegroundWindow
GetIconInfo
CopyIcon
GetDlgItem
GetWindow
GetWindowInfo
IsIconic
IsWindowVisible
GetGUIThreadInfo
InSendMessage
GetDesktopWindow
GetClientRect
msvcrt
_errno
__mb_cur_max
_adjust_fdiv
malloc
_initterm
free
_memicmp
memchr
_swab
_hypot
_ultoa
_CIacos
_CIfmod
time
floor
_pctype
_isctype
_CIsinh
gdi32
GdiFlush
GetBkColor
ole32
CoGetCurrentProcess
shell32
DuplicateIcon
ord64
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ