Static task
static1
Behavioral task
behavioral1
Sample
a885c0febc382180621b43884ba442c342212884130efe34088cfc261b01015f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a885c0febc382180621b43884ba442c342212884130efe34088cfc261b01015f.dll
Resource
win10v2004-20220812-en
General
-
Target
a885c0febc382180621b43884ba442c342212884130efe34088cfc261b01015f
-
Size
236KB
-
MD5
0d04c700770cdd2b723a647ac6695870
-
SHA1
1eb506afcdf51620219a05d00dfb6b25e4435d48
-
SHA256
a885c0febc382180621b43884ba442c342212884130efe34088cfc261b01015f
-
SHA512
8500055ddaddff6326337b4a3eec199519d38216dbcac20d14f7daccac8fdb3787609fe4aa5d8ec5bd30e94a8b325782d3e133ab609c4b4a2ebb6ae782e1e3e3
-
SSDEEP
3072:0o71tfT47SMtLajJGk70n12e3o949PBrESK8cWBR5EexBTIdl41IJf83HZbtm:0oZZ5dR7012oo9upKpQ6exBEPBJk3htm
Malware Config
Signatures
Files
-
a885c0febc382180621b43884ba442c342212884130efe34088cfc261b01015f.dll windows x86
c177e6b167290f02db4208d8319c187f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegEnumKeyA
RegOpenKeyExA
user32
GetScrollPos
Sections
.hodbi Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ieko Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.amfj Size: 165KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gkafc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ