Static task
static1
Behavioral task
behavioral1
Sample
75f762b6c435e9cea0be424f7863bdf4517e1e2550832c82ed3b260216badc5a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75f762b6c435e9cea0be424f7863bdf4517e1e2550832c82ed3b260216badc5a.dll
Resource
win10v2004-20220812-en
General
-
Target
75f762b6c435e9cea0be424f7863bdf4517e1e2550832c82ed3b260216badc5a
-
Size
137KB
-
MD5
b34895f6ef046e896de30e5742003813
-
SHA1
9888757532e0f5bb21503a8c843c71821480e1bc
-
SHA256
75f762b6c435e9cea0be424f7863bdf4517e1e2550832c82ed3b260216badc5a
-
SHA512
43a81ce90f4ed6fd94ac6b0c057f9eec73a50fcb61d295ccf171797454916d5bb06e6f24331691fd710d4432054a4a323bd44a4c260264895fa662e527ce9b6e
-
SSDEEP
3072:KspxlQcN/83Kv59auHAI9OKkEorWJYrseXspzPF:KaxlB1hvDYI9XdWKzPF
Malware Config
Signatures
Files
-
75f762b6c435e9cea0be424f7863bdf4517e1e2550832c82ed3b260216badc5a.dll windows x86
d3f108b4413d801ddd1b54a7864e621f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
Sleep
GetACP
LoadLibraryA
InterlockedDecrement
InterlockedExchange
IsBadWritePtr
GetProcAddress
GetUserDefaultLCID
MulDiv
VirtualAlloc
VirtualProtect
GetTickCount
IsBadReadPtr
GetModuleFileNameA
GetProcessHeap
user32
GetCursor
GetWindowRect
GetWindowTextA
IsCharLowerA
IsCharUpperA
GetWindowRgn
GetForegroundWindow
GetIconInfo
CopyIcon
GetDlgItem
GetWindow
GetWindowInfo
IsIconic
IsWindowVisible
GetGUIThreadInfo
InSendMessage
GetDesktopWindow
GetClientRect
msvcrt
_errno
__mb_cur_max
_adjust_fdiv
malloc
_initterm
free
_memicmp
memchr
_swab
_hypot
_ultoa
_CIacos
_CIfmod
time
floor
_pctype
_isctype
_CIsinh
gdi32
GdiFlush
GetBkColor
ole32
CoGetCurrentProcess
shell32
DuplicateIcon
ord64
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ