Static task
static1
Behavioral task
behavioral1
Sample
ff2ef8f1c9264afbf1aba77494b9dd3de0d9644c72894232d04778f54d14a2a6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff2ef8f1c9264afbf1aba77494b9dd3de0d9644c72894232d04778f54d14a2a6.dll
Resource
win10v2004-20220812-en
General
-
Target
ff2ef8f1c9264afbf1aba77494b9dd3de0d9644c72894232d04778f54d14a2a6
-
Size
31KB
-
MD5
6c2263428dc639a267e8303a14bd38b4
-
SHA1
1d411c8aa2549c40f8995011ab6c7b49657dfd40
-
SHA256
ff2ef8f1c9264afbf1aba77494b9dd3de0d9644c72894232d04778f54d14a2a6
-
SHA512
206e0258a85ca0893fda0da1550636cc709821e5d2bb519eb3f2f2aab787e58d2954a7333f4ab93582cf006fc816bb74ad3e62e02ad0c129993052d94718f206
-
SSDEEP
768:I5kZMZDgBEP/WrJct5a2fI818vrZdp5RhVlnY:IGZMV+Y/Ttgh8+rFbhk
Malware Config
Signatures
Files
-
ff2ef8f1c9264afbf1aba77494b9dd3de0d9644c72894232d04778f54d14a2a6.dll windows x86
27cc4d132a613570f2407d3da3b1befa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcessHeap
GetWindowsDirectoryW
lstrcatW
CreateFileW
LoadLibraryA
gdi32
CreateCompatibleDC
TextOutW
StretchBlt
SetStretchBltMode
PatBlt
GetTextFaceW
CreateDIBitmap
BitBlt
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yyewr1 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yyewr2 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yyewr3 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yyewr4 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yyewr5 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yyewr6 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yyewr7 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data8 Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ