Static task
static1
Behavioral task
behavioral1
Sample
87653970959700b8f530a83a63adc7e1bc0fed454f3e22c96919fdc9016bb3e1.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87653970959700b8f530a83a63adc7e1bc0fed454f3e22c96919fdc9016bb3e1.dll
Resource
win10v2004-20220812-en
General
-
Target
87653970959700b8f530a83a63adc7e1bc0fed454f3e22c96919fdc9016bb3e1
-
Size
156KB
-
MD5
6ced66ab8e5b317b3b310180f0e6c194
-
SHA1
fa30d5abbb2d9a46c7e46dae8358241280ef6c40
-
SHA256
87653970959700b8f530a83a63adc7e1bc0fed454f3e22c96919fdc9016bb3e1
-
SHA512
ad678a4a562662438da12062140de03478050008123f15d805c1ed96851db9b0fb846e71025c38683c5fe3774897bcae9da20a62f99cdbbf213e9fea13906aa4
-
SSDEEP
3072:PlqwE1J+L+Hl6SbmwZ2U5KOp+XtqsQ2nXW:P4wyW+FTd1bMqq
Malware Config
Signatures
Files
-
87653970959700b8f530a83a63adc7e1bc0fed454f3e22c96919fdc9016bb3e1.dll windows x86
b5b5ae7f54e2316d8e5a6830e5c618b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetCommandLineA
RtlUnwind
GlobalFlags
GetModuleHandleExA
GetEnvironmentStringsW
GetProcessVersion
GetProcAddress
SetLastError
GetLastError
FreeLibrary
lstrcmpiA
lstrlenA
GetModuleHandleA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetEnvironmentVariableA
LocalFree
GetVersionExA
FreeEnvironmentStringsW
LoadLibraryA
shell32
ShellExecuteExW
shlwapi
SHDeleteKeyW
PathCombineW
ole32
OleInitialize
CoQueryProxyBlanket
OleInitialize
OleUninitialize
Sections
.text Size: 56KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ