SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
ba1291452d983c3b2a12c1ff56e6260af9d204480cc98fed72deb8a2e3c53fe7.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba1291452d983c3b2a12c1ff56e6260af9d204480cc98fed72deb8a2e3c53fe7.dll
Resource
win10v2004-20221111-en
General
-
Target
ba1291452d983c3b2a12c1ff56e6260af9d204480cc98fed72deb8a2e3c53fe7
-
Size
1.5MB
-
MD5
ed410015b7d6dcda081b67a0bd7d304a
-
SHA1
e2670e197a1b9d0cba31a0f038fcc55740367575
-
SHA256
ba1291452d983c3b2a12c1ff56e6260af9d204480cc98fed72deb8a2e3c53fe7
-
SHA512
6423951a167aa90fb62f6def9d18ed9ff4a342bdab7251c6b81ee588707f421a9b143d2aff95ae04671371ecede9f83dca9f448a5ac8485793f9418835856342
-
SSDEEP
3072:xIgtDv9mo8gaaP3ZoDRKCaaokR2zojjHLyORm+WVW9OmJIWFN:bt9baEoFjryD0J
Malware Config
Signatures
Files
-
ba1291452d983c3b2a12c1ff56e6260af9d204480cc98fed72deb8a2e3c53fe7.dll windows x86
ae9cc7d53b6a44aaf649c33c47aa3770
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetLastError
GetModuleFileNameA
GetTickCount
GlobalAlloc
GlobalFree
InitializeCriticalSection
LoadLibraryA
Sleep
WaitForSingleObject
FreeLibrary
FindFirstFileA
ExitProcess
EnterCriticalSection
DeleteFileA
CreateThread
CreateFileMappingA
CreateFileA
CompareStringA
LeaveCriticalSection
CloseHandle
advapi32
RegSetValueA
RegQueryValueExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
user32
BeginPaint
CallWindowProcA
CascadeWindows
CharNextW
CharUpperBuffA
CheckDlgButton
ClientToScreen
CopyRect
CreatePopupMenu
MessageBoxA
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 925B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ