Static task
static1
Behavioral task
behavioral1
Sample
db475686dfccfe256dd7af2b320a7ecee1c07671d1f17c1ab76e639d8367393e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db475686dfccfe256dd7af2b320a7ecee1c07671d1f17c1ab76e639d8367393e.dll
Resource
win10v2004-20220812-en
General
-
Target
db475686dfccfe256dd7af2b320a7ecee1c07671d1f17c1ab76e639d8367393e
-
Size
25KB
-
MD5
188ea774927119b26021678f523183ed
-
SHA1
528c63f345ec67f261c248ede247ac12b6ad68e9
-
SHA256
db475686dfccfe256dd7af2b320a7ecee1c07671d1f17c1ab76e639d8367393e
-
SHA512
f651ee6f2f05db9e9ad16de4a0b1e3aa3efa232bc1daa7b1c29a94961bf71b9087311533831e34e5316b574dea7dda7bce0b3a7908317c3172f72181e4216644
-
SSDEEP
768:clSfJF55DjZQqpC3RP5UnhSyQE8u/90VpbN:2SflR1AhP5gSyQE/OVf
Malware Config
Signatures
Files
-
db475686dfccfe256dd7af2b320a7ecee1c07671d1f17c1ab76e639d8367393e.dll windows x86
71ee5641b16212d38d3b1927289fb1be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleIcon
SetLastError
RegisterConsoleOS2
FindNextVolumeA
HeapAlloc
TransactNamedPipe
GetFileSize
DosDateTimeToFileTime
SetCommMask
SystemTimeToFileTime
TermsrvAppInstallMode
CmdBatNotification
GetConsoleMode
ReadFile
HeapCompact
InvalidateConsoleDIBits
VirtualFree
GetCommandLineA
ExitProcess
GetStartupInfoA
FindNextFileA
GlobalFindAtomA
UnlockFileEx
SetConsoleNumberOfCommandsA
FileTimeToSystemTime
SetDefaultCommConfigA
FindNextFileA
SetConsoleWindowInfo
SetNamedPipeHandleState
MulDiv
SetConsoleNumberOfCommandsA
InvalidateConsoleDIBits
ClearCommError
Sections
ATSEC0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ATSEC1 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ATSEC2 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 2KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ