Static task
static1
Behavioral task
behavioral1
Sample
ae6ec297837b90df89562dd285143e9307849740e21de8154182e02534ab3c4f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae6ec297837b90df89562dd285143e9307849740e21de8154182e02534ab3c4f.dll
Resource
win10v2004-20221111-en
General
-
Target
ae6ec297837b90df89562dd285143e9307849740e21de8154182e02534ab3c4f
-
Size
88KB
-
MD5
02006e7ee23437da04e85bdb70cd0720
-
SHA1
17f9c563c515de428260ea0af2ab0ceae70219b7
-
SHA256
ae6ec297837b90df89562dd285143e9307849740e21de8154182e02534ab3c4f
-
SHA512
22317ce5a213e01cdf2d89ad77426862d43ffd85b2cfccfe027bda31e684065fe7c6fff56f15d6d4d3a1e2fc165e4ef4ba87248419dac8bf4920037eb985df44
-
SSDEEP
1536:cT22Z0RIImSd7qiWcYWYCkLt0kso2wHtz60Wiej5XiUQ:cT22ZWZW3ht2T09eNXiZ
Malware Config
Signatures
Files
-
ae6ec297837b90df89562dd285143e9307849740e21de8154182e02534ab3c4f.dll windows x86
0a773d2a8e88957488814eab9f6cfc57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
GetSystemPowerStatus
GetExitCodeProcess
SetFilePointerEx
VirtualQuery
IsBadCodePtr
IsValidLocale
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.rc3sec0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rc3sec1 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec2 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ