Static task
static1
Behavioral task
behavioral1
Sample
b52ee8a1c81478c1bbdf696c085f0a54e78387a029f183856b8ab25088fc309f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b52ee8a1c81478c1bbdf696c085f0a54e78387a029f183856b8ab25088fc309f.dll
Resource
win10v2004-20220812-en
General
-
Target
b52ee8a1c81478c1bbdf696c085f0a54e78387a029f183856b8ab25088fc309f
-
Size
183KB
-
MD5
dd7ddc3e617e6bac1c7fe00b9e8fd3f0
-
SHA1
bc666d8e37942fba27d7da9543e25c7abdc004e2
-
SHA256
b52ee8a1c81478c1bbdf696c085f0a54e78387a029f183856b8ab25088fc309f
-
SHA512
8f910db8230acedd2af76aa294a9016e437001b7a6dbc826c958df1da6381f9056a7a61cff84047019eda1d52d873f0ae2b5219670f34b00dd3f46bccd9128c8
-
SSDEEP
3072:nmSZSt9RMeoDSQL7WLfhM8CpSIELbaYxj+Yb/VkpfYUA907TVuFG:mD/mGeJ7ELbaYhRRQYRufo
Malware Config
Signatures
Files
-
b52ee8a1c81478c1bbdf696c085f0a54e78387a029f183856b8ab25088fc309f.dll windows x86
23d6ef75366a4497d2a0fd7c55a264a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
VirtualFree
GetCurrentThreadId
GetSystemDefaultLangID
lstrcpynA
FindFirstFileA
VirtualAlloc
FreeResource
lstrcpyA
EnterCriticalSection
GetFileType
ExitThread
WideCharToMultiByte
lstrcmpiA
LocalReAlloc
MoveFileExA
GetVersion
Sleep
GetOEMCP
GetProcessHeap
FindClose
FindResourceA
SetEndOfFile
GetThreadLocale
CreateFileA
ExitProcess
RaiseException
GetStringTypeA
GetStringTypeW
lstrcmpA
CreateEventA
CompareStringA
LoadLibraryA
lstrlenA
GetFileSize
GlobalDeleteAtom
InitializeCriticalSection
LocalFree
LoadResource
FreeLibrary
GetEnvironmentStrings
SetErrorMode
GetLastError
GetLocalTime
MulDiv
SizeofResource
SetFilePointer
SetLastError
GetFileAttributesA
GetUserDefaultLCID
GetVersionExA
GetDateFormatA
user32
DefFrameProcA
GetSysColor
CreateWindowExA
CreateMenu
SetWindowPos
GetDC
GetClipboardData
GetDCEx
FindWindowA
SetWindowTextA
CheckMenuItem
GetPropA
GetClassLongA
EndPaint
SetCursor
DrawTextA
GetSysColorBrush
GetActiveWindow
GetMessagePos
DrawMenuBar
DrawIconEx
IsWindowVisible
ShowWindow
DispatchMessageW
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 164KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ