Static task
static1
Behavioral task
behavioral1
Sample
cf45294a7f44b2e9b3d8d8e0ce1afce0ea065280152cf51938afbf05467bb0dd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf45294a7f44b2e9b3d8d8e0ce1afce0ea065280152cf51938afbf05467bb0dd.dll
Resource
win10v2004-20221111-en
General
-
Target
cf45294a7f44b2e9b3d8d8e0ce1afce0ea065280152cf51938afbf05467bb0dd
-
Size
16KB
-
MD5
1516975c068c130b857cff7178b675b9
-
SHA1
20b98718947efe3780a369da9e3cd98e22a07edc
-
SHA256
cf45294a7f44b2e9b3d8d8e0ce1afce0ea065280152cf51938afbf05467bb0dd
-
SHA512
17d0bf70079a3a0f02ecb7668083ee3860367c8c04104a4f7cdeb930a49c6283e5e599add644b5e386568f8cccac39ab785faa0dd4ef23a43d7d0ea804b14da1
-
SSDEEP
384:DX7gbEYJsDr8+diNTsSCG79sAQhTnxrLpLrHFY9Oi6T10WJGXWCLC:z7gbEYCDPWTn9gF9fpVTI
Malware Config
Signatures
Files
-
cf45294a7f44b2e9b3d8d8e0ce1afce0ea065280152cf51938afbf05467bb0dd.dll windows x86
54edd8a87de0389d0a6032660ea551cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
lstrcatA
lstrcpyA
FreeLibrary
lstrlenA
GetProcAddress
LoadLibraryA
Sleep
FindClose
SetFilePointer
FindNextFileA
FindFirstFileA
GetWindowsDirectoryA
CreateThread
GetSystemTime
lstrcpynA
lstrcmpA
GetSystemDirectoryA
GetModuleFileNameA
WriteFile
CloseHandle
GetLastError
LocalFree
ExitProcess
user32
CallWindowProcA
SendMessageA
FindWindowExA
GetWindowTextA
IsCharAlphaNumericA
FindWindowA
EnumWindows
SetWindowLongA
wsprintfA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
shell32
ShellExecuteA
msvcrt
_stricmp
_adjust_fdiv
malloc
_CxxThrowException
??3@YAXPAX@Z
_strnicmp
_initterm
??1type_info@@UAE@XZ
printf
sscanf
strstr
__CxxFrameHandler
__dllonexit
_onexit
free
ws2_32
ntohs
WSACleanup
WSAStartup
recv
ioctlsocket
socket
gethostname
gethostbyname
htons
inet_ntoa
bind
oleaut32
GetErrorInfo
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ