Static task
static1
Behavioral task
behavioral1
Sample
3477f23d48c423433a992c33d9e4c4293bcb3479116d58bca7fe598b2f7203de.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3477f23d48c423433a992c33d9e4c4293bcb3479116d58bca7fe598b2f7203de.dll
Resource
win10v2004-20220812-en
General
-
Target
3477f23d48c423433a992c33d9e4c4293bcb3479116d58bca7fe598b2f7203de
-
Size
88KB
-
MD5
059c5df7caf1f4f3d62912e5d852074e
-
SHA1
d7e7ab65867176481b9a367fb8d5c30e22b2175e
-
SHA256
3477f23d48c423433a992c33d9e4c4293bcb3479116d58bca7fe598b2f7203de
-
SHA512
10218c4cd5c5d0a6ffd07c6348bee0d18935158ecb457649b7a827a2f6e073701037b7890031e379d0149d189e606e36b1f44cc399c27814e1c52d196ea44722
-
SSDEEP
1536:aUA7e+kdW3wlyIZd3Pb6GqgdQptUmk6QJRk1f:apSWwlLPbQWcOXRkJ
Malware Config
Signatures
Files
-
3477f23d48c423433a992c33d9e4c4293bcb3479116d58bca7fe598b2f7203de.dll windows x86
7deadb21fb34e1aed5ea5fd69eead75c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
TerminateProcess
InterlockedExchange
InterlockedCompareExchange
RaiseException
SetUnhandledExceptionFilter
LocalAlloc
GetUserDefaultLangID
GetCurrentProcess
GetProcAddress
FreeLibrary
GetCommandLineA
UnhandledExceptionFilter
VirtualProtect
RtlUnwind
GetVersionExA
VirtualQuery
ExitProcess
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
LoadLibraryA
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
GetSystemInfo
advapi32
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ