Static task
static1
Behavioral task
behavioral1
Sample
c6a217d91674d5d787f40dfd91b82af86aa87ad7cc04671ee98ca2ebc55c2868.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6a217d91674d5d787f40dfd91b82af86aa87ad7cc04671ee98ca2ebc55c2868.dll
Resource
win10v2004-20220812-en
General
-
Target
c6a217d91674d5d787f40dfd91b82af86aa87ad7cc04671ee98ca2ebc55c2868
-
Size
224KB
-
MD5
648b59694080665b8067de33f10690dc
-
SHA1
0b07fa269286eb9e50ec02b9f54c7e8b0f349cbe
-
SHA256
c6a217d91674d5d787f40dfd91b82af86aa87ad7cc04671ee98ca2ebc55c2868
-
SHA512
33b16cdabb0c09f4e847a85cfcf65a97798afbbd100dd29710f35b4499b6308e92e9fea89e949bd8c25f55982c3e270f22942511d562366cc147ee5a83996535
-
SSDEEP
6144:CknLg9y21aUmFCG/pldQ7slI0pWT33PJOKx3gfp9d:tLg9913IBt84GS
Malware Config
Signatures
Files
-
c6a217d91674d5d787f40dfd91b82af86aa87ad7cc04671ee98ca2ebc55c2868.dll windows x86
0eb98cab732761329fd8ed78a5623bd7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetFileType
FindClose
GetStdHandle
DeleteAtom
FindAtomA
AddAtomW
FlushFileBuffers
DeleteFileA
WriteFile
GetCPInfo
AddAtomA
FreeResource
GetPriorityClass
GetLastError
GetFileTime
GetPriorityClass
FindClose
AddAtomA
FreeResource
ExitProcess
DeleteAtom
GetCommandLineA
GetCPInfo
OpenFileMappingA
GlobalFree
GetFileType
CopyFileExA
ExitThread
AddAtomW
WriteFile
ReadFile
FindAtomA
FlushFileBuffers
GetStdHandle
GetLocalTime
FindAtomW
FatalExit
DeleteFileA
user32
EndDialog
InsertMenuA
LoadCursorA
IsWindow
DialogBoxParamA
LoadMenuA
DialogBoxParamW
CreateIcon
GetMenu
AppendMenuW
CalcMenuBar
GetWindowTextLengthA
IsMenu
AppendMenuA
AlignRects
DrawTextA
GetDlgItem
GetCursor
DrawTextW
CopyImage
CopyIcon
CalcMenuBar
CopyRect
LoadCursorA
DrawTextA
IsWindow
BlockInput
GetFocus
GetDlgItem
CloseWindow
IsMenu
InsertMenuA
GetCursor
advapi32
RegCreateKeyExW
RegEnumValueA
RegEnumKeyExA
RegFlushKey
RegQueryValueA
RegDeleteValueA
RegReplaceKeyA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegEnumKeyW
RegOpenKeyW
RegLoadKeyW
RegFlushKey
RegDeleteValueA
RegDeleteValueW
RegEnumValueW
RegEnumValueA
RegOpenKeyExW
RegLoadKeyW
RegQueryValueW
RegEnumKeyW
RegQueryInfoKeyA
RegEnumKeyExW
RegReplaceKeyA
RegQueryValueExW
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 177KB - Virtual size: 541KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE