Static task
static1
Behavioral task
behavioral1
Sample
bd90915eaec77b7baa95a7e967748ee5ff637a50a42ac2345d0c3c1f4ccfc24a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd90915eaec77b7baa95a7e967748ee5ff637a50a42ac2345d0c3c1f4ccfc24a.dll
Resource
win10v2004-20220812-en
General
-
Target
bd90915eaec77b7baa95a7e967748ee5ff637a50a42ac2345d0c3c1f4ccfc24a
-
Size
156KB
-
MD5
3841ebf0815f2e3a250b9c6607a7bf82
-
SHA1
dffef25538aaba42b6d90698ab0381617eb48798
-
SHA256
bd90915eaec77b7baa95a7e967748ee5ff637a50a42ac2345d0c3c1f4ccfc24a
-
SHA512
0fef0a239e95cc6afe561ecf04acec25ed3fdf858c1fbfcf26775905b81ff41864a0200e97d53f99100331dadcc24b36e68d0eb9dc4f8eee9bbaf8ddec7d4aca
-
SSDEEP
3072:bhYp1FkbBkw0WEBenWoftDtL+wRz7qZ1UhPIn1R9Fz+ySZ6C:bepsb/0WEEWC/iwRO1Um1R9Fz+j
Malware Config
Signatures
Files
-
bd90915eaec77b7baa95a7e967748ee5ff637a50a42ac2345d0c3c1f4ccfc24a.dll windows x86
367ff124085d7931241dea8aed785c0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
CreateProcessW
DeleteCriticalSection
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetWindowsDirectoryW
CreateFileMappingW
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalFree
MapViewOfFile
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
lstrcpynW
VirtualAlloc
ReadFile
GlobalFree
CloseHandle
advapi32
RegOpenKeyW
msvcrt
_wcsnicmp
wcscpy
_purecall
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444444 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ