Static task
static1
Behavioral task
behavioral1
Sample
a52bf3ec2c47908a449f3878e162f1db8f28d52b003898c1ec3adc02c09d8894.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a52bf3ec2c47908a449f3878e162f1db8f28d52b003898c1ec3adc02c09d8894.dll
Resource
win10v2004-20220812-en
General
-
Target
a52bf3ec2c47908a449f3878e162f1db8f28d52b003898c1ec3adc02c09d8894
-
Size
265KB
-
MD5
94e7f0b18df6730b139824ee951acfaf
-
SHA1
fb798a683aac1849740de5313c8cbf77735dc341
-
SHA256
a52bf3ec2c47908a449f3878e162f1db8f28d52b003898c1ec3adc02c09d8894
-
SHA512
ac438e4b91f3a4813b23ff5f629c4f2e73b067f44856f00cf9567aad8e034a64ed160c6158d8536fc4f775326c4032220230a17a2b3d28ac8dfb442ab7c2ecc4
-
SSDEEP
6144:M3u6PhCagyhT2EGGXPIgzWp9erb5yhsK0DMjKLiHEJlChf2rrxWq:MjJRT2EdnWCrNyaKkLikJQh+nxWq
Malware Config
Signatures
Files
-
a52bf3ec2c47908a449f3878e162f1db8f28d52b003898c1ec3adc02c09d8894.dll windows x86
d6cdc76f942735cba8ea79a6e19e7e4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
CreateFileW
GetPrivateProfileStringW
EnumDateFormatsExA
GetFileAttributesW
GetModuleFileNameW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW
DeleteFileW
CreateDirectoryW
TerminateProcess
MultiByteToWideChar
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DeleteFileA
GetFileAttributesA
GetTempPathA
GetTempPathW
ReadFile
oleaut32
SafeArrayDestroyDescriptor
SafeArrayCreateEx
QueryPathOfRegTypeLib
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen
msvfw32
ICInfo
Sections
.text Size: 167KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ