Static task
static1
Behavioral task
behavioral1
Sample
a76cbb0144f7b1a6a7364453485127a640c6d280baa9d2ee91a1dde6aedf70fe.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a76cbb0144f7b1a6a7364453485127a640c6d280baa9d2ee91a1dde6aedf70fe.dll
Resource
win10v2004-20220812-en
General
-
Target
a76cbb0144f7b1a6a7364453485127a640c6d280baa9d2ee91a1dde6aedf70fe
-
Size
307KB
-
MD5
6bf50ce80c8be9108abcc7729b9cb0de
-
SHA1
0674e47a04885c79915adbeb23559b7b7b5ed615
-
SHA256
a76cbb0144f7b1a6a7364453485127a640c6d280baa9d2ee91a1dde6aedf70fe
-
SHA512
3bfcf68cca3e1353d78deda8c026e5ebbf025e11f3f93275eaaadcd80574aa3b44851441297b2351e3fe949f0f8da935f8f9d6e45f08600ce06ca3629d403aca
-
SSDEEP
6144:UdGRZeMDnThMwE9WiVaLf0fqcnoJkVAD60/MxbuZxgzwL1Db2FV/ojfiXrZj:e2pDThPRgaLsCio/O+Ozwtb2FV3Xrt
Malware Config
Signatures
Files
-
a76cbb0144f7b1a6a7364453485127a640c6d280baa9d2ee91a1dde6aedf70fe.dll windows x86
88b2be634d94e89de38cd5a5cff6cede
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualProtect
VirtualFree
gdi32
LineTo
Sections
.text Size: 231KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ