AbsentA
Static task
static1
Behavioral task
behavioral1
Sample
b91c3ed19339b34786a5da9d24a525d502e28bbb683c28748266cba80db7fc3d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b91c3ed19339b34786a5da9d24a525d502e28bbb683c28748266cba80db7fc3d.dll
Resource
win10v2004-20221111-en
General
-
Target
b91c3ed19339b34786a5da9d24a525d502e28bbb683c28748266cba80db7fc3d
-
Size
48KB
-
MD5
9fe62fd9a69eb495ac0973160bddb3de
-
SHA1
15dfa3c05a41c1360346032cf2da1764154db9cb
-
SHA256
b91c3ed19339b34786a5da9d24a525d502e28bbb683c28748266cba80db7fc3d
-
SHA512
2a62313fb403e1977def025ff776cd6d1255ece941a094f140af0df04b877bd60c557295234f54792642cb69d846ae85d64a747ca848c76db27b6ade9be89d69
-
SSDEEP
768:6r+OO0uqbJIrMvsW90ru5YdNb1lBS4KVA3CyoNFb3Gjo9Hc:M+h7qFIrRm0rllAPAFwaoJc
Malware Config
Signatures
Files
-
b91c3ed19339b34786a5da9d24a525d502e28bbb683c28748266cba80db7fc3d.dll windows x86
39ef43e59950d7bac8662df5d663f4e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
GetVersion
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
MultiByteToWideChar
IsValidCodePage
GetDriveTypeA
FileTimeToLocalFileTime
VirtualAlloc
lstrcmpiA
CloseHandle
LoadLibraryA
TlsAlloc
VirtualFree
GetLastError
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
RtlUnwind
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
user32
FindWindowA
GetDC
GetForegroundWindow
shlwapi
PathFileExistsA
StrStrIA
ole32
CoTaskMemAlloc
CoInitialize
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ