Static task
static1
Behavioral task
behavioral1
Sample
b280bc03c64510e23777f3ed53c87500871594d0a32d26a09c36812d21645ec9.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b280bc03c64510e23777f3ed53c87500871594d0a32d26a09c36812d21645ec9.dll
Resource
win10v2004-20221111-en
General
-
Target
b280bc03c64510e23777f3ed53c87500871594d0a32d26a09c36812d21645ec9
-
Size
161KB
-
MD5
88c18f57863c6fad22fb9f2c66fccf28
-
SHA1
3119d0cd7dc8478082e1f8c3183f5c787b748469
-
SHA256
b280bc03c64510e23777f3ed53c87500871594d0a32d26a09c36812d21645ec9
-
SHA512
e26202230f4d7e22c032fc868e64d29f91275e1a92e68f730ca3b7b659f3d1c044a86e039e275f85e7c1d19fc28e01cd1dd875336c4f5bf30d01e6dc638116e1
-
SSDEEP
3072:0ikt8IQnTG6j2Vccb2ejoMj6PPIS0NlJJQ1dWY9J2m561A:VktNe7jexvoMjM4TbQTdJ2RA
Malware Config
Signatures
Files
-
b280bc03c64510e23777f3ed53c87500871594d0a32d26a09c36812d21645ec9.dll windows x86
97dd0b67a470626fc489bd65c613054b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
Sleep
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
DosDateTimeToFileTime
IsDebuggerPresent
GetComputerNameA
IsBadReadPtr
GetCurrentProcess
GetProcAddress
GetProcessHeap
user32
GetGUIThreadInfo
GetLastActivePopup
GetCursor
GetMenuContextHelpId
GetWindowContextHelpId
GetWindowRect
IsCharUpperA
IsCharAlphaA
GetWindowRgn
GetWindowDC
GetParent
GetWindowPlacement
IsMenu
InSendMessage
GetAncestor
GetDlgItem
CopyIcon
WindowFromDC
GetWindow
advapi32
RevertToSelf
msvcrt
__doserrno
div
_errno
_hypot
__mb_cur_max
_adjust_fdiv
malloc
_initterm
free
memmove
_memicmp
_swab
_CIacos
floor
ceil
frexp
localeconv
_pctype
_isctype
_itoa
gdi32
GetStretchBltMode
GetBkColor
GdiFlush
ole32
CoDosDateTimeToFileTime
CoRevertToSelf
shell32
ord680
DuplicateIcon
ord66
ord524
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ