Static task
static1
Behavioral task
behavioral1
Sample
b68601638ca004f4c38b3eecc1007f8c691e6dee963c279d9ff39778aaea2b10.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b68601638ca004f4c38b3eecc1007f8c691e6dee963c279d9ff39778aaea2b10.dll
Resource
win10v2004-20221111-en
General
-
Target
b68601638ca004f4c38b3eecc1007f8c691e6dee963c279d9ff39778aaea2b10
-
Size
156KB
-
MD5
07074675a5c42131048ec84c9080b920
-
SHA1
e6d44b1008e314e0d12233d598d9facbbb13e18e
-
SHA256
b68601638ca004f4c38b3eecc1007f8c691e6dee963c279d9ff39778aaea2b10
-
SHA512
91f17513e75d18c24c263d407ce15be1103a3b011e1d9aec71224c68fb798007ee8394ae4ff8271c1cebb0a97403cbdce55396543528d530ceaa9cc9e712c686
-
SSDEEP
3072:JM3rKU5mveSC1maLRlXuXJbVbu2NVm+CxcfhLj2JarwRfkadOuGZdolE9CMNie5t:WrKNeSUmaLRkbRVmKJLqJMwRMadOTZdQ
Malware Config
Signatures
Files
-
b68601638ca004f4c38b3eecc1007f8c691e6dee963c279d9ff39778aaea2b10.dll windows x86
7e84a314e412806b4abdbd6190388c93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetTickCount
GetVersionExA
HeapAlloc
HeapDestroy
HeapFree
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LocalFree
QueryPerformanceCounter
SetLastError
UnhandledExceptionFilter
lstrlenA
user32
CreateWindowExA
DefWindowProcA
DialogBoxParamA
DispatchMessageA
EndDialog
EndPaint
GetActiveWindow
GetClientRect
GetDC
GetDesktopWindow
GetMenu
GetParent
GetPropA
GetSysColor
GetWindowLongA
IsWindow
KillTimer
LoadCursorA
LoadIconA
MessageBoxA
PeekMessageA
PostMessageA
PostQuitMessage
SendDlgItemMessageA
SetCursor
SetTimer
SetWindowPos
wsprintfA
Sections
CODE Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 118KB - Virtual size: 461KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
.rsrc Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ