fx
Static task
static1
Behavioral task
behavioral1
Sample
f05c143b12be6040200cd49a3bb27bc3dd292f5167ac2dc94de6eea052463640.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f05c143b12be6040200cd49a3bb27bc3dd292f5167ac2dc94de6eea052463640.dll
Resource
win10v2004-20221111-en
General
-
Target
f05c143b12be6040200cd49a3bb27bc3dd292f5167ac2dc94de6eea052463640
-
Size
12KB
-
MD5
338b299117002a0979be6f2f4d87bab8
-
SHA1
4eae130277db1974ca9dc258dc3a26e8b16f2fa4
-
SHA256
f05c143b12be6040200cd49a3bb27bc3dd292f5167ac2dc94de6eea052463640
-
SHA512
af2d3ec931656be5d6374fa7596aed069f5d8149ac7518cdec118d2917137b37a98847d3ae18566d3e1c4a6062e3fc649282a34e0f0dfbbb6c4b0ae8cf6d9e02
-
SSDEEP
192:OU/OQzeL4XqkOBahIxkpfKknUw8EBaekJ9/xbcQuQ:OU/zs4XqkOEhIxk4SRkJ9tc
Malware Config
Signatures
Files
-
f05c143b12be6040200cd49a3bb27bc3dd292f5167ac2dc94de6eea052463640.dll windows x86
f4576d67665e76ae10c35e44a4e40add
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
ReadProcessMemory
GetCurrentProcess
WriteProcessMemory
Sleep
GetCommandLineA
GlobalFree
GlobalLock
GlobalAlloc
GetPrivateProfileStringA
ResumeThread
VirtualProtectEx
IsBadReadPtr
CreateThread
user32
GetKeyboardState
CallNextHookEx
GetAsyncKeyState
ToUnicode
SetWindowsHookExA
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
msvcrt
_initterm
malloc
_adjust_fdiv
_stricmp
free
fread
memset
strlen
fclose
fopen
memcpy
strcpy
strrchr
strcmp
strcat
sprintf
??2@YAPAXI@Z
strncpy
strstr
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdt Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 914B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ