Static task
static1
Behavioral task
behavioral1
Sample
d449b5bbb7e307721a45f7be6ee8b290e336e6abfe5eb6eea1479eea484f8cdf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d449b5bbb7e307721a45f7be6ee8b290e336e6abfe5eb6eea1479eea484f8cdf.dll
Resource
win10v2004-20221111-en
General
-
Target
d449b5bbb7e307721a45f7be6ee8b290e336e6abfe5eb6eea1479eea484f8cdf
-
Size
31KB
-
MD5
f319bdeea974d5a1d464b243d3128542
-
SHA1
0cb3120096fa90eb460f6135f3786fa532a5c549
-
SHA256
d449b5bbb7e307721a45f7be6ee8b290e336e6abfe5eb6eea1479eea484f8cdf
-
SHA512
de62f48dbfeab68a7f9b28a74d84c50b6352affbe1db6776e1f2c7656d967000e62fb7f75473843ffee6a0ddd3fd0458a25248117c27a6568242159f4d83ac8f
-
SSDEEP
768:4+iOk470s9hhbnLOFf0C5G8DMJHoVFM2I:4+iG70s9hFLOxMMWIns
Malware Config
Signatures
Files
-
d449b5bbb7e307721a45f7be6ee8b290e336e6abfe5eb6eea1479eea484f8cdf.dll windows x86
34ff7315baf80bb9c7f8d0e180b8a8e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchangeAdd
GetModuleFileNameA
GetProcAddress
GetVersion
GetStartupInfoA
VirtualAlloc
VirtualProtect
VirtualQuery
GetComputerNameA
IsBadWritePtr
InterlockedExchange
InterlockedDecrement
LoadLibraryA
Sleep
QueryPerformanceCounter
IsDebuggerPresent
user32
GetCursor
GetClientRect
GetWindowTextA
IsCharLowerA
IsCharUpperA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowRgn
GetWindowDC
IsClipboardFormatAvailable
GetDC
WindowFromDC
GetIconInfo
GetAncestor
GetTitleBarInfo
GetWindowInfo
GetTopWindow
GetGUIThreadInfo
GetParent
GetWindowPlacement
GetDesktopWindow
IsMenu
InSendMessage
SetLastErrorEx
IsWindowUnicode
advapi32
InitializeSecurityDescriptor
msvcrt
_pctype
_adjust_fdiv
malloc
_initterm
free
_swab
_ultoa
_set_error_mode
rand
_CIsinh
_CIpow
ldiv
_itoa
localeconv
__doserrno
ldexp
_isctype
modf
frexp
__mb_cur_max
gdi32
GetStretchBltMode
GdiGetBatchLimit
GetROP2
GetBkColor
GetBitmapDimensionEx
ole32
CoDosDateTimeToFileTime
CoGetCurrentProcess
shell32
DuplicateIcon
ord680
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ