Static task
static1
Behavioral task
behavioral1
Sample
f98b97bd4dbe565abca705de8f7cc7cc5d475f5c7f9e0d3bdf20851d496337ac.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f98b97bd4dbe565abca705de8f7cc7cc5d475f5c7f9e0d3bdf20851d496337ac.dll
Resource
win10v2004-20220812-en
General
-
Target
f98b97bd4dbe565abca705de8f7cc7cc5d475f5c7f9e0d3bdf20851d496337ac
-
Size
17KB
-
MD5
9a083d83d913cf64f7df10d0f0500bd7
-
SHA1
d8d8281e83487d4ba8b981f37b484845b4310aec
-
SHA256
f98b97bd4dbe565abca705de8f7cc7cc5d475f5c7f9e0d3bdf20851d496337ac
-
SHA512
a7111e18bf478296956caf48d5108975113b80a13cd878af1330f66ca9123c102cd0e56bee5b0ca064819e2d2e37b26970964e586a029fd40ba47d497497ace7
-
SSDEEP
192:Xx1po4X3lNG4tPeyJ7aLwDDvJPHri+Y0nm4pL9nxvQdP1yAPDTZaZXphgH:Xu4XVc4tPeaDNHrA8mYKdPsefZaZ5qH
Malware Config
Signatures
Files
-
f98b97bd4dbe565abca705de8f7cc7cc5d475f5c7f9e0d3bdf20851d496337ac.dll windows x86
dc4c077b95218a6e70230688298c83c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
OpenProcess
GetCurrentProcessId
GetFileSize
CloseHandle
ReadFile
SetFilePointer
CreateFileA
VirtualProtect
GetCurrentProcess
GetProcessHeap
HeapAlloc
OutputDebugStringA
LoadLibraryA
GetModuleHandleA
lstrcpynA
GetPrivateProfileStringA
GetProcAddress
Sleep
GetModuleFileNameA
CreateThread
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
memcpy
_except_handler3
_itoa
_vsnprintf
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strupr
free
memset
strcat
strlen
_strcmpi
strncpy
malloc
user32
wsprintfA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ