Static task
static1
Behavioral task
behavioral1
Sample
8668e7cc60bb31c864ffcfe19c3cb9aa5abe2bc123e4f3e4a154bd142e2c6e52.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8668e7cc60bb31c864ffcfe19c3cb9aa5abe2bc123e4f3e4a154bd142e2c6e52.dll
Resource
win10v2004-20221111-en
General
-
Target
8668e7cc60bb31c864ffcfe19c3cb9aa5abe2bc123e4f3e4a154bd142e2c6e52
-
Size
223KB
-
MD5
c557751399dbcf9a8d1167900fec58df
-
SHA1
010658344493c5fa3a77d635eaeeb23155f6468c
-
SHA256
8668e7cc60bb31c864ffcfe19c3cb9aa5abe2bc123e4f3e4a154bd142e2c6e52
-
SHA512
81ed9b4658c8c3b3605c214528cad85f6893264b9d713af6cfdf4e233d4fad12484f09752910253207692dd1242513b9fdb12f69dadf484df4e64bae11c273a1
-
SSDEEP
3072:UAFsHd4fjK2w+05dYRO+kJyYlHMaljXDsVFYQQ/scMeufo0uArux8:ZsANwt5dckMyDo3Q/nMeulyx
Malware Config
Signatures
Files
-
8668e7cc60bb31c864ffcfe19c3cb9aa5abe2bc123e4f3e4a154bd142e2c6e52.dll windows x86
9abca36ba7d46ccf140d0f05393a213e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
ExitProcess
HeapAlloc
advapi32
RegEnumValueA
RegLoadKeyW
RegCreateKeyA
user32
DrawTextA
GetWindowTextLengthA
Sections
.fkni Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.liglo Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abmd Size: 164KB - Virtual size: 515KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dgiie Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ