Static task
static1
Behavioral task
behavioral1
Sample
af755feed9ce455832559e1e6c39acb84f28738d605348d019adf434520cc259.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
af755feed9ce455832559e1e6c39acb84f28738d605348d019adf434520cc259.dll
Resource
win10v2004-20220812-en
General
-
Target
af755feed9ce455832559e1e6c39acb84f28738d605348d019adf434520cc259
-
Size
252KB
-
MD5
66c26110b2162918e3a126ddc2f65c76
-
SHA1
8388fd8dfa456d65b847688a42518554e3fc22c8
-
SHA256
af755feed9ce455832559e1e6c39acb84f28738d605348d019adf434520cc259
-
SHA512
29c8829ff5358a75b548f3c35a6fd598a8bbf9ba6ce533c64bfe4b1f09169090d03d64f3baed6902a9bf16569de981a955b7cad446de4d090f8d6f006be746f9
-
SSDEEP
3072:suQZfWYSQSO46Btva7+gHWRYqsALbfuGz1jZlwTiBi6etz71xNZ:tub46rvw+uWRDbfl1jZqiBi6o
Malware Config
Signatures
Files
-
af755feed9ce455832559e1e6c39acb84f28738d605348d019adf434520cc259.dll windows x86
a235a0b70bcd806d386c493b354cfd48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ReadFile
GetCommandLineW
gdi32
GetStockObject
advapi32
RegOpenKeyA
msvcrt
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_controlfp
_initterm
_onexit
_wcmdln
_wfopen
exit
wcstok
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 602B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ