Static task
static1
Behavioral task
behavioral1
Sample
99497a1f6bf0d86e97342be5b8379c67f31ad74ab2258943e2431f63459033af.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
99497a1f6bf0d86e97342be5b8379c67f31ad74ab2258943e2431f63459033af.dll
Resource
win10v2004-20221111-en
General
-
Target
99497a1f6bf0d86e97342be5b8379c67f31ad74ab2258943e2431f63459033af
-
Size
228KB
-
MD5
dd5273051a3ca1015c8513e4d7387c47
-
SHA1
c98616371a4387b1fd6b16d5520b209ccbae9546
-
SHA256
99497a1f6bf0d86e97342be5b8379c67f31ad74ab2258943e2431f63459033af
-
SHA512
0cfa09ba0058456734ee167770289e7f101f1ebb8a521ef5e982bd5a0578fff7c705f199ba9f80a68fb2d786ed6a1854ca59df7c9cc7ac8c01d1db052e8c3710
-
SSDEEP
3072:qjuia/khedpTfByIBmG919Q89nC+n9qkQckQM6zr+2casquomFLEkn:cBheBbBmG91G8AG9qkQckc+2c1qDwLR
Malware Config
Signatures
Files
-
99497a1f6bf0d86e97342be5b8379c67f31ad74ab2258943e2431f63459033af.dll windows x86
c5c820e864da6cbda29ddaf3d6b0fd37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyRect
kernel32
ExitProcess
advapi32
RegEnumKeyA
RegQueryValueExW
Sections
.jamc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nibd Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lmdcm Size: 162KB - Virtual size: 457KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jkll Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ceoeh Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ