Static task
static1
Behavioral task
behavioral1
Sample
d6e22f0058bcc6bed1cea2b858b7eee8891091ee8ab988c42cb9249453e61f92.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6e22f0058bcc6bed1cea2b858b7eee8891091ee8ab988c42cb9249453e61f92.dll
Resource
win10v2004-20220901-en
General
-
Target
d6e22f0058bcc6bed1cea2b858b7eee8891091ee8ab988c42cb9249453e61f92
-
Size
182KB
-
MD5
8b6158f74baf89738b543f5311c30360
-
SHA1
37c07c5062d8fb3c5070467bc2b6c3aa3eba54b2
-
SHA256
d6e22f0058bcc6bed1cea2b858b7eee8891091ee8ab988c42cb9249453e61f92
-
SHA512
b1db5a87dd4b9a74c74f6881b8cf20e9b81c2c875d4e8d9ff9925d6da7879cf0ad43229aa557f3108557eab5af7096f7f10a5ba02e82043a716c53fe8b3fb19e
-
SSDEEP
3072:U13Si5HZiNIl+6IrPKHFOfD+3+mWZbgH:U13J5oICW4b+umWa
Malware Config
Signatures
Files
-
d6e22f0058bcc6bed1cea2b858b7eee8891091ee8ab988c42cb9249453e61f92.dll windows x86
dbb9f8e268f3c8b730e03b2b6b1088f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
VirtualAlloc
gdi32
GetStockObject
advapi32
RegOpenKeyExW
imm32
ImmGetCompositionStringW
ImmGetConversionStatus
ImmCreateContext
ImmEnumRegisterWordW
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata7 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata6 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata5 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata4 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ