Static task
static1
Behavioral task
behavioral1
Sample
d1896a47b97349889001dc324e29cce11dcb32a466993f0bdb99a0c7343d0ce2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d1896a47b97349889001dc324e29cce11dcb32a466993f0bdb99a0c7343d0ce2.dll
Resource
win10v2004-20220901-en
General
-
Target
d1896a47b97349889001dc324e29cce11dcb32a466993f0bdb99a0c7343d0ce2
-
Size
92KB
-
MD5
a33d4d26148da885e6b53f7ff840f6e0
-
SHA1
d3fbcc1bf50aa82b77f57c37e705d94b9ae95d9a
-
SHA256
d1896a47b97349889001dc324e29cce11dcb32a466993f0bdb99a0c7343d0ce2
-
SHA512
b5b9fa8295ea6acd0fe1562e1bc4d2bda8b0a6e4382b871249980268e62abfd7ce314e8a7eb9ad7f6942b7c1a3c1dd3fe96d22859a2e086214c45559c799f782
-
SSDEEP
1536:5zrX2VwVQGKH/36FLg2RrSHbkwP4ihLJiTscn6d6fHZB3tO:5XX2sQGKHgghLkX6d6fHNO
Malware Config
Signatures
Files
-
d1896a47b97349889001dc324e29cce11dcb32a466993f0bdb99a0c7343d0ce2.dll windows x86
fa5e5f8b5dad998310f83b1f9a202faa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
GetCurrentThread
user32
LoadIconA
advapi32
RegOpenKeyExW
msvcrt
_except_handler3
__getmainargs
Sections
.55517 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55516 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55515 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55514 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55513 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.55512 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 354B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ