Static task
static1
Behavioral task
behavioral1
Sample
85afe3f36f8262b27a84879d181210d1c0a7baf6376518160f197b9f1d4c0597.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85afe3f36f8262b27a84879d181210d1c0a7baf6376518160f197b9f1d4c0597.dll
Resource
win10v2004-20220812-en
General
-
Target
85afe3f36f8262b27a84879d181210d1c0a7baf6376518160f197b9f1d4c0597
-
Size
71KB
-
MD5
b1c43378c80d93eb596e5948dca76c80
-
SHA1
1b551dff33ff66fba31fa1a137b10f49e882b23f
-
SHA256
85afe3f36f8262b27a84879d181210d1c0a7baf6376518160f197b9f1d4c0597
-
SHA512
22a14f4324472f3a3685be819f0e4a0e68790a038bdddffc907abaefe5cb7efa55b448ce9d5ac960449d9de30af6d3f30d6e645d07d6dd74984247cd608b8a40
-
SSDEEP
1536:dN7yoVPvbg846gE0fM9RDw9wpBETpHb41e1pVkq:dpyk3bg846gEC8611r
Malware Config
Signatures
Files
-
85afe3f36f8262b27a84879d181210d1c0a7baf6376518160f197b9f1d4c0597.dll windows x86
a6fc8b0f38a00aa7d44d9eb7cf111080
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetVersion
UnhandledExceptionFilter
GetCurrentProcess
GetTickCount
InterlockedCompareExchange
Sleep
InterlockedExchange
SetLastError
GetProcAddress
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapAlloc
HeapDestroy
InterlockedDecrement
GetProcessHeap
HeapFree
GetModuleHandleA
FindResourceW
lstrlenA
GetCommandLineA
VirtualFree
VirtualProtect
InterlockedIncrement
VirtualAlloc
user32
SetRectEmpty
EnableWindow
IsWindow
IsDlgButtonChecked
CopyRect
IsRectEmpty
DestroyWindow
EndDialog
PostMessageW
SendMessageW
gdi32
GetStockObject
SelectObject
SetTextColor
SetBkMode
Polyline
SetROP2
Rectangle
msvcr71
memcpy
_XcptFilter
free
malloc
_initterm
memset
__CppXcptFilter
_onexit
__dllonexit
_adjust_fdiv
_except_handler3
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ