start
Static task
static1
Behavioral task
behavioral1
Sample
a6b1d72227a834b2b0f890f8e999d0b60614ea65d1fc6d843b16b304bcd8875f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6b1d72227a834b2b0f890f8e999d0b60614ea65d1fc6d843b16b304bcd8875f.dll
Resource
win10v2004-20220812-en
General
-
Target
a6b1d72227a834b2b0f890f8e999d0b60614ea65d1fc6d843b16b304bcd8875f
-
Size
68KB
-
MD5
cb7ef89c9716b9e8a22ae5c01f09327a
-
SHA1
0ba25b46156ebffac8da7920c07537b27be96efc
-
SHA256
a6b1d72227a834b2b0f890f8e999d0b60614ea65d1fc6d843b16b304bcd8875f
-
SHA512
db3af117b864bd1f5b00cedca6d7ff07fe8144cfe92c03168291fabf9920a4a9dca3f9281a7ecfb9887bf1cfd8e4f7fc81f7eb63196531b365d825881436e397
-
SSDEEP
1536:EDWT0lavIORnToIfdILzUG3+Y9gHXRN0PN88UCtd9S:E6Tgi5TBfkuXRSPNmse
Malware Config
Signatures
Files
-
a6b1d72227a834b2b0f890f8e999d0b60614ea65d1fc6d843b16b304bcd8875f.dll windows x86
d3a92cb5dc15fa07cab9620382ce8c6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DisableThreadLibraryCalls
ExitProcess
lstrcmpiA
VirtualAlloc
IsBadReadPtr
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
user32
TranslateMessage
DispatchMessageA
GetMessageA
SetTimer
KillTimer
SendMessageA
LoadCursorA
RegisterClassExA
CreateWindowExA
DefWindowProcA
LoadIconA
msvcrt
_adjust_fdiv
_initterm
free
malloc
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 606B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ