SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
c043cedba6f8fb34fcf9ff5c40fd32e71f7a56c6d921f9caf53dc8de2485e7ca.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c043cedba6f8fb34fcf9ff5c40fd32e71f7a56c6d921f9caf53dc8de2485e7ca.dll
Resource
win10v2004-20220812-en
General
-
Target
c043cedba6f8fb34fcf9ff5c40fd32e71f7a56c6d921f9caf53dc8de2485e7ca
-
Size
1.5MB
-
MD5
02f07f40fb68118488a25895ee0b8d14
-
SHA1
f44ae05f62b71970a50b78bc8ced29bc1a890065
-
SHA256
c043cedba6f8fb34fcf9ff5c40fd32e71f7a56c6d921f9caf53dc8de2485e7ca
-
SHA512
d2e6eb28251255f524f434d06b14647ebc87ed40c53c8ee569d2adabef5c5891b90fa349a92506d647ba6d572a77a3f9df5d645f910d58206afccc02ac1e00d6
-
SSDEEP
3072:cqE7cbKNtce2ebH/3BqKzEvqYW5GJ8KUYwvioGm2HK9IcVevaC+7SRNm:cPCKNtltwW5GJ5oPFIUB7S
Malware Config
Signatures
Files
-
c043cedba6f8fb34fcf9ff5c40fd32e71f7a56c6d921f9caf53dc8de2485e7ca.dll windows x86
c8664626f8272982ece3253da8a1481d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
GetLastError
GetLocaleInfoA
GetTickCount
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
GetDateFormatA
Sleep
WaitForSingleObject
GetCurrentThreadId
GetComputerNameA
FormatMessageA
EnterCriticalSection
DeleteFileA
CreateThread
CreateEventA
LoadLibraryA
CloseHandle
advapi32
RegSetValueA
RegQueryValueExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegCloseKey
user32
AppendMenuA
BeginPaint
CallWindowProcA
CharNextA
CharNextW
ClientToScreen
CopyRect
CreatePopupMenu
MessageBoxA
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 925B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ