Static task
static1
Behavioral task
behavioral1
Sample
704ba678959863bdd17e4f51b6583ab770e8ea29b4f2965ba13a32b5c6b56aea.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
704ba678959863bdd17e4f51b6583ab770e8ea29b4f2965ba13a32b5c6b56aea.dll
Resource
win10v2004-20221111-en
General
-
Target
704ba678959863bdd17e4f51b6583ab770e8ea29b4f2965ba13a32b5c6b56aea
-
Size
122KB
-
MD5
fa6db4d81ca9212ab0c07a8f9ee6af40
-
SHA1
668115b32c1b23508a8ee03a241d4e4aa63cee7d
-
SHA256
704ba678959863bdd17e4f51b6583ab770e8ea29b4f2965ba13a32b5c6b56aea
-
SHA512
7473391b9330b0848df7b44b92cda7c867831702fdf2fdc333e7a3d818ef1d0cbf3abf82d7fcdd97d1f81c4263a57970373aa68356df54525cb368a9d8befebb
-
SSDEEP
1536:oO0LV1drZf1RAi73nOCUR0pBTSLedMcjhr2ccQL:r0L5rh1Rx+F07TSLWMcjhr1L
Malware Config
Signatures
Files
-
704ba678959863bdd17e4f51b6583ab770e8ea29b4f2965ba13a32b5c6b56aea.dll windows x86
f34a56a2f258c770ab089d248485c8bf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
VirtualAlloc
user32
LoadIconW
LoadIconA
msvcrt
_XcptFilter
__argv
__getmainargs
__p__fmode
__set_app_type
_acmdln
_c_exit
_cexit
_controlfp
_exit
_ftol
exit
strncpy
toupper
Sections
ggg11 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg10 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg9 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg7 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg6 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata52 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata51 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata5 Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ