Static task
static1
Behavioral task
behavioral1
Sample
b9ea9719434bae023da6302bca15e510da3c65d225c63415c44550a69195d015.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9ea9719434bae023da6302bca15e510da3c65d225c63415c44550a69195d015.dll
Resource
win10v2004-20220812-en
General
-
Target
b9ea9719434bae023da6302bca15e510da3c65d225c63415c44550a69195d015
-
Size
17KB
-
MD5
9eb233a9919e0eb60321ba95ca224ab0
-
SHA1
1bd910ceefc41714f6879c23f189dd920613a253
-
SHA256
b9ea9719434bae023da6302bca15e510da3c65d225c63415c44550a69195d015
-
SHA512
bc8d510f2fdbb492ad18ff9a33faac9eee6569e7f56ee312a214653cc3a5069eff84834f897e8e0fd2bce0c9980bad816a2b2d5a3d317218471f1740f0aca7d8
-
SSDEEP
192:ARBWcYo945LfR7H5lqxVbuhjAek8/Z1COpMu:QWUC5Lp7Hbqx8hjAek8/2OpMu
Malware Config
Signatures
Files
-
b9ea9719434bae023da6302bca15e510da3c65d225c63415c44550a69195d015.dll windows x86
fde575e9320468c944bdcc1398152246
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
IsBadReadPtr
IsBadWritePtr
Sleep
VirtualProtect
msvcrt
__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
strstr
system
user32
MessageBoxA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 608B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE