Static task
static1
Behavioral task
behavioral1
Sample
94ea29174d56f7a5f8e9ce771e742f5e61b17f13d8202a3487029c655c80bdd0.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
94ea29174d56f7a5f8e9ce771e742f5e61b17f13d8202a3487029c655c80bdd0.dll
Resource
win10v2004-20220901-en
General
-
Target
94ea29174d56f7a5f8e9ce771e742f5e61b17f13d8202a3487029c655c80bdd0
-
Size
12KB
-
MD5
0e94dbaece806e78f0c049d593086184
-
SHA1
681f4a3cefeb2383f675f6f3f7d9a6a8706625f5
-
SHA256
94ea29174d56f7a5f8e9ce771e742f5e61b17f13d8202a3487029c655c80bdd0
-
SHA512
0d4615a2eaaadfe9117c8d9e571c8e3ce4b9af8b15b47d17f29a198175c499d226df29c3e28f404f82b564d51ab4e2db0c7d994e677da4d4aa152b1671ff7eba
-
SSDEEP
384:3XtK1sDW8shyXZG/VwavB4FW+6CII7+u2:3dK138shWgdw/gAqj
Malware Config
Signatures
Files
-
94ea29174d56f7a5f8e9ce771e742f5e61b17f13d8202a3487029c655c80bdd0.dll windows x86
4ce319c95a94d61f99c3c0b6a1aa4247
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
_strcmpi
malloc
_initterm
free
??2@YAPAXI@Z
_except_handler3
kernel32
lstrlenA
LoadLibraryA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetProcAddress
CreateMutexA
GetLastError
GetPrivateProfileStringA
lstrcatA
CloseHandle
GetCurrentProcess
lstrcmpiA
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcpyA
SetLastError
DeleteFileA
GetWindowsDirectoryA
MoveFileA
TerminateProcess
OpenProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ