SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
b6cb5dc96107525e3d5d6a31e165fe8b87dbf3a35c807e639fc5bc1cb9cbf6f8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6cb5dc96107525e3d5d6a31e165fe8b87dbf3a35c807e639fc5bc1cb9cbf6f8.dll
Resource
win10v2004-20220812-en
General
-
Target
b6cb5dc96107525e3d5d6a31e165fe8b87dbf3a35c807e639fc5bc1cb9cbf6f8
-
Size
23KB
-
MD5
a33f002cb236db973b1cc51643d75745
-
SHA1
00586c90c2010a5c9a47cb75843cc0584d19061e
-
SHA256
b6cb5dc96107525e3d5d6a31e165fe8b87dbf3a35c807e639fc5bc1cb9cbf6f8
-
SHA512
200ecaa30f6aed08d315e0c73e3c77c955c8b08732f1e1e85e47617cfc61b04391e58696cb58c7cb52540a4600a3fa40a7e196d9ae1cf9d092b63b01223c4958
-
SSDEEP
384:U56XxvaIHCKLoj7TpcoO1q76Ma72yWirfNi9rApN2bcXr8xZmWDJPKat3nd:UcDCKEnTpcoO1q7naIirfNiCnkcOQWVb
Malware Config
Signatures
Files
-
b6cb5dc96107525e3d5d6a31e165fe8b87dbf3a35c807e639fc5bc1cb9cbf6f8.dll windows x86
2c7010c9b25979d69b1cf5a7c3a26380
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetEnvironmentVariableA
GetFileSize
GetLastError
GetLocaleInfoA
GetProcAddress
GlobalAlloc
GetCommandLineA
LoadLibraryA
ReadFile
SetErrorMode
Sleep
VirtualAlloc
WaitForSingleObject
lstrlenA
FreeLibrary
FormatMessageA
FindClose
ExitProcess
CreateThread
CreateFileMappingA
CreateFileA
CompareStringA
CloseHandle
advapi32
RegSetValueA
RegQueryValueExA
RegQueryValueA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
user32
AppendMenuA
BeginPaint
CallWindowProcA
CascadeWindows
CharNextW
CharUpperBuffA
CheckDlgButton
ClientToScreen
CopyRect
CreatePopupMenu
MessageBoxA
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ