DoWork
Static task
static1
Behavioral task
behavioral1
Sample
f90ec1432123bc97fd18d7471c9cafe849068713af7e48208f27aa633d7ce17b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f90ec1432123bc97fd18d7471c9cafe849068713af7e48208f27aa633d7ce17b.dll
Resource
win10v2004-20221111-en
General
-
Target
f90ec1432123bc97fd18d7471c9cafe849068713af7e48208f27aa633d7ce17b
-
Size
251KB
-
MD5
59776cf166eb74c70abbc1981b84cba0
-
SHA1
ca3c73679d0ecd7ac1ba66fb2a4c8bf38ddb2fcd
-
SHA256
f90ec1432123bc97fd18d7471c9cafe849068713af7e48208f27aa633d7ce17b
-
SHA512
badccc25c35b728a466cbae1ead6672925630888e7b26435129b67b299e8fd9a74d802797c698c91d1dbe628816ddfc6b088baf1fe1c46e87cc3a768d2a30dfc
-
SSDEEP
6144:rz+92mhAMJ/cPl3i3PLzK7LNlLqg+MsiPhSWdzKqyow1ORA:rK2mhAMJ/cPluQHOgIc9z5wMRA
Malware Config
Signatures
Files
-
f90ec1432123bc97fd18d7471c9cafe849068713af7e48208f27aa633d7ce17b.dll windows x86
66ef28972cc1beddad4141d8a54ceffe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetTempPathA
lstrlenA
CloseHandle
CreateFileA
GetFileSize
GetModuleFileNameA
GetTempFileNameA
ReadFile
SetFilePointer
VirtualAlloc
WinExec
WriteFile
Exports
Exports
Sections
.text Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 467B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ