Static task
static1
Behavioral task
behavioral1
Sample
d9e6f791859901292be685e17a1bc71f1f6ebc8c3352c0c5b3b9646701f0117c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9e6f791859901292be685e17a1bc71f1f6ebc8c3352c0c5b3b9646701f0117c.dll
Resource
win10v2004-20220812-en
General
-
Target
d9e6f791859901292be685e17a1bc71f1f6ebc8c3352c0c5b3b9646701f0117c
-
Size
512KB
-
MD5
539f964d02e2658306a966acfea0d522
-
SHA1
6648ebf826de20656f2cf3dba229f56d930331f7
-
SHA256
d9e6f791859901292be685e17a1bc71f1f6ebc8c3352c0c5b3b9646701f0117c
-
SHA512
c5712cee39b0d8f57feb4267ac6956c6f65342a1d04ad635d8741b7ab43194312fefb147e58da0cbd2b89a6087b2ad797133fcdc20a970e5505077e895c88cc9
-
SSDEEP
3072:gb3QxLTkAz0im85vZeW+fFEzf7eIv9sv+umblxYU6RWWPlpUSi1PU7wV+Iw:gbikAz0im85he3eD84D1KUSmo
Malware Config
Signatures
Files
-
d9e6f791859901292be685e17a1bc71f1f6ebc8c3352c0c5b3b9646701f0117c.dll windows x86
c57fe652f70526904c6acf5e50d9d274
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocStringLen
user32
GetSubMenu
GetActiveWindow
GetCursor
SetPropA
IsChild
MessageBeep
GetKeyboardType
KillTimer
kernel32
GetVersionExA
GetCommandLineA
LocalAlloc
VirtualAllocEx
ExitProcess
GetProcAddress
GetModuleHandleA
comctl32
ImageList_Read
ImageList_Remove
gdi32
GetDCOrgEx
RestoreDC
CreateBrushIndirect
CreateFontIndirectA
SelectObject
version
VerFindFileA
GetFileVersionInfoA
shell32
DragQueryFileA
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1024B - Virtual size: 873B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 190B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ