Static task
static1
Behavioral task
behavioral1
Sample
74f77641049d3abedfa965cff0f62af224e6d9a6fe2b131b39296ecf4a8e704d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74f77641049d3abedfa965cff0f62af224e6d9a6fe2b131b39296ecf4a8e704d.dll
Resource
win10v2004-20220812-en
General
-
Target
74f77641049d3abedfa965cff0f62af224e6d9a6fe2b131b39296ecf4a8e704d
-
Size
163KB
-
MD5
bec4c649816271500a3ce3227fb03290
-
SHA1
c962482d5c3b6945ff7362c7e9ce812c2cdd5c75
-
SHA256
74f77641049d3abedfa965cff0f62af224e6d9a6fe2b131b39296ecf4a8e704d
-
SHA512
bd264840ac0d10d5a7061d1388102b7fa84e43fa19f321983ae00fc4696b75841a2d7e5cb9a87e46591f30a24283a16d49ab86874ea6132888382472cd641017
-
SSDEEP
1536:1Ye4/txDZ+UclMOZU7XlOZ9LjOKPVliuRMzThim0wEQhuXIfS:mhs1DXrlkT90w77S
Malware Config
Signatures
Files
-
74f77641049d3abedfa965cff0f62af224e6d9a6fe2b131b39296ecf4a8e704d.dll windows x86
42b568d1f1bb1840fca7a719115504c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
GetConsoleScreenBufferInfo
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeW
GetLogicalDrives
GetModuleHandleA
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
GetVolumeInformationW
LocalFree
FindClose
SetConsoleCursorPosition
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
WideCharToMultiByte
WriteConsoleW
lstrcpynW
CreateFileW
VirtualAlloc
GetStartupInfoW
OpenProcess
CloseHandle
user32
LoadCursorA
LoadIconA
advapi32
RegOpenKeyExA
msvcrt
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_controlfp
_except_handler3
_initterm
exit
Sections
.rdata6 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata7 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 918B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ