Static task
static1
Behavioral task
behavioral1
Sample
c290b2c783668452931fb1ea7e73fdaed6f0f53339d8cf7bc56c297ef3e5fa27.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c290b2c783668452931fb1ea7e73fdaed6f0f53339d8cf7bc56c297ef3e5fa27.dll
Resource
win10v2004-20221111-en
General
-
Target
c290b2c783668452931fb1ea7e73fdaed6f0f53339d8cf7bc56c297ef3e5fa27
-
Size
61KB
-
MD5
d1c9ea0bad53f617162a0e7bb8d8d798
-
SHA1
fee2fe7583f254f96d64a1926f23f3cbd33b6918
-
SHA256
c290b2c783668452931fb1ea7e73fdaed6f0f53339d8cf7bc56c297ef3e5fa27
-
SHA512
a360dae1c2cd734408973227a0a27ef47896f504fd7abdbc6c8111c22da039c0d1779382c2933d88615bfe338a8308bbb4d1756d1dee89d462e65c9fd4c7a119
-
SSDEEP
1536:GWyTUJaEzTskl3qHTteve8IRJAzgN59Ng9R9A9JJyHC9jfi:GWyGTskE55Azgj9a9R9qJyHC9jfi
Malware Config
Signatures
Files
-
c290b2c783668452931fb1ea7e73fdaed6f0f53339d8cf7bc56c297ef3e5fa27.dll windows x86
f1a7c45fc327025cccf6d19a02df8176
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
EmptyClipboard
kernel32
GetCurrentProcessId
TerminateProcess
Sleep
LocalAlloc
LoadLibraryW
FreeLibrary
ExitProcess
DeleteCriticalSection
CloseHandle
CreateFileW
advapi32
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ