SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
8273408677fe8761ee4f5ad645635ddba1f304ee1229c4ee41c8c629ddd40f46.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8273408677fe8761ee4f5ad645635ddba1f304ee1229c4ee41c8c629ddd40f46.dll
Resource
win10v2004-20221111-en
General
-
Target
8273408677fe8761ee4f5ad645635ddba1f304ee1229c4ee41c8c629ddd40f46
-
Size
1.5MB
-
MD5
b178b0bfe5c970b9ae78e9a263097e35
-
SHA1
374cbbbe1e7299dc1adb7bb1b66d1ce466ab9d06
-
SHA256
8273408677fe8761ee4f5ad645635ddba1f304ee1229c4ee41c8c629ddd40f46
-
SHA512
e4046b49d78948760bc0d0cb07ff9c5a4bc68a0eab1492574b0dfb344fe6b4abc0f6a3ef9503b20c2f77dd96c7b23562cd9a71ddf95e61eb73fa1038a1e03f90
-
SSDEEP
6144:lIELntWD/7NFU8tPmH75wgSgG3emF1RMNu:rW/xFU8tuH75RTkRMN
Malware Config
Signatures
Files
-
8273408677fe8761ee4f5ad645635ddba1f304ee1229c4ee41c8c629ddd40f46.dll windows x86
7d0db0645b7105b7af27ca5035bb8223
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetDateFormatA
GetEnvironmentVariableA
GetLocalTime
GetLocaleInfoA
GetTickCount
GetCurrentProcess
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
WaitForSingleObject
GetCommandLineA
FreeLibrary
FormatMessageA
EnterCriticalSection
CreateThread
CreateEventA
CloseHandle
advapi32
RegSetValueA
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
user32
AppendMenuA
BeginPaint
CallWindowProcA
CascadeWindows
CharNextW
CharUpperBuffA
CheckDlgButton
CopyRect
CreatePopupMenu
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1002B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ