zPEKGh@16
Static task
static1
Behavioral task
behavioral1
Sample
bfd1cd88ca566128724a23843d1b6e707b12106fc129620c231716afc6cad371.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfd1cd88ca566128724a23843d1b6e707b12106fc129620c231716afc6cad371.dll
Resource
win10v2004-20221111-en
General
-
Target
bfd1cd88ca566128724a23843d1b6e707b12106fc129620c231716afc6cad371
-
Size
1.0MB
-
MD5
4ee8085aa7bb7e7ad6314230da572313
-
SHA1
77cbc871113e31d4741625d6da146f4d0b1feed8
-
SHA256
bfd1cd88ca566128724a23843d1b6e707b12106fc129620c231716afc6cad371
-
SHA512
cd2208e9e91325a8bc13f86961e4ca63f37c6ce331d48cd74ae55e3ff14b78d843e3a07ebd1511c9678d8f1e74737e57ea4ee23d50d3186e5c64b826ef63a37f
-
SSDEEP
6144:5F0vjEoi2tGv7kkEnMUNwpmPIC4gDl1gLy:UbEt2tG4kQPNGmAalL
Malware Config
Signatures
Files
-
bfd1cd88ca566128724a23843d1b6e707b12106fc129620c231716afc6cad371.dll windows x86
38964bc31b89eee2e36b81939bc18e91
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetVersion
GetModuleHandleW
VirtualFree
GetCommandLineW
GetLocaleInfoA
GetCurrentThread
RaiseException
LocalReAlloc
LockResource
EnterCriticalSection
FindClose
SetErrorMode
MoveFileExA
LoadLibraryA
lstrlenA
FindResourceA
LoadLibraryExA
GetSystemDefaultLangID
HeapFree
GlobalFindAtomA
WriteFile
FormatMessageA
lstrcmpA
CreateEventA
GlobalDeleteAtom
GetStringTypeA
ExitProcess
FreeResource
CompareStringA
DeleteFileA
lstrlenW
GetCurrentProcessId
VirtualAllocEx
EnumCalendarInfoA
LocalAlloc
GetThreadLocale
GetFileSize
lstrcpyA
SetThreadLocale
GetCommandLineA
CreateThread
IsBadHugeReadPtr
SetFilePointer
GetStartupInfoA
GetFileAttributesA
WaitForSingleObject
LoadResource
WideCharToMultiByte
IsBadReadPtr
MoveFileA
GetStdHandle
GetTickCount
FreeLibrary
comdlg32
FindTextA
GetFileTitleA
ChooseColorA
user32
GetClassNameA
GetClientRect
GetWindow
LoadIconA
GetCursor
GetDC
GetSysColorBrush
IsWindow
GetMenu
GetClipboardData
ole32
CoUninitialize
CLSIDFromString
CLSIDFromProgID
MkParseDisplayName
OleRun
CreateOleAdviseHolder
CoRegisterClassObject
Exports
Exports
Sections
CODE Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 793KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ipdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ