ProcDeListing
Static task
static1
Behavioral task
behavioral1
Sample
89a4d9afbfc05e6663f1cf207d506ce49c03c6ac2656a1624ed5618872007b74.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
89a4d9afbfc05e6663f1cf207d506ce49c03c6ac2656a1624ed5618872007b74.dll
Resource
win10v2004-20220812-en
General
-
Target
89a4d9afbfc05e6663f1cf207d506ce49c03c6ac2656a1624ed5618872007b74
-
Size
7KB
-
MD5
7ada1716d46cb5222990245687c3107f
-
SHA1
5ccf863f4177e5e0b5aa2f0c4cffb95f9f3cedd0
-
SHA256
89a4d9afbfc05e6663f1cf207d506ce49c03c6ac2656a1624ed5618872007b74
-
SHA512
deeba77cfe1aa9ebca8107c5c7b45447e6786b9ed5e194a0a771b47dbb4c87749c562cf4a2208f9cbc0dfd6f366bd28f4f1d4dcad5e74af9ec6534e5d33ff020
-
SSDEEP
96:nPImDejAZ+RSSSSMgK5tv5EgZ72nYcTnnpO1gvRix7F4+:nwuZ+RSSSSl0PcTnpWpFB
Malware Config
Signatures
Files
-
89a4d9afbfc05e6663f1cf207d506ce49c03c6ac2656a1624ed5618872007b74.dll windows x86
4aef5c20b74a50ccf54501baa67b4158
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
TlsFree
LocalFree
HeapAlloc
TlsGetValue
TlsAlloc
Sleep
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
TlsSetValue
GetVersion
HeapFree
LocalAlloc
advapi32
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
user32
SendMessageA
GetWindowTextA
GetWindowLongA
GetClassNameA
CallNextHookEx
Exports
Exports
Sections
CODE Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ