Static task
static1
Behavioral task
behavioral1
Sample
b3e4a4ef89677b3635c71a2a530145850370ee03e002c19f49eee2be76151fb1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3e4a4ef89677b3635c71a2a530145850370ee03e002c19f49eee2be76151fb1.dll
Resource
win10v2004-20221111-en
General
-
Target
b3e4a4ef89677b3635c71a2a530145850370ee03e002c19f49eee2be76151fb1
-
Size
244KB
-
MD5
df290c08a76bb6a23dc2cdcc34a0f429
-
SHA1
bd5424a607c8483e6b07c30053979780ff1e7587
-
SHA256
b3e4a4ef89677b3635c71a2a530145850370ee03e002c19f49eee2be76151fb1
-
SHA512
e78c60ef8a08d74f41be1f72134b06dbe6ebacccd7df0bf453302d2dced87a5a99ec9f747d22deebca259015c00aa50503d2a1c82eb1814f9908378e449cf7cb
-
SSDEEP
3072:+baccmgzUyjZWuPNZ7bJJDmGqqxeAsOA94IJBlWBj4fQPKiTC0:ACNZWuPNZ7FokeAsT94QBejFCiTC0
Malware Config
Signatures
Files
-
b3e4a4ef89677b3635c71a2a530145850370ee03e002c19f49eee2be76151fb1.dll windows x86
a9eeb20fe54f14a091f9dcfce677de76
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetLocalTime
CreateDirectoryA
GetStdHandle
HeapFree
DeleteFileA
GetLocalTime
ExitThread
WriteFile
lstrlenA
GetCPInfo
WriteFile
user32
AppendMenuW
DrawTextA
IsMenu
EndDialog
GetWindowTextLengthA
InsertMenuA
advapi32
RegCreateKeyExA
RegGetKeySecurity
RegEnumKeyW
RegCreateKeyA
RegCreateKeyExA
RegLoadKeyA
RegCreateKeyW
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyExA
RegCreateKeyExW
RegEnumKeyW
Sections
CODE Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 168KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ