WeiDao
Static task
static1
Behavioral task
behavioral1
Sample
7724a81b3a7c656fcbc42c6a88e3a036fa18bb5656efa05af62065b96b021620.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7724a81b3a7c656fcbc42c6a88e3a036fa18bb5656efa05af62065b96b021620.dll
Resource
win10v2004-20220812-en
General
-
Target
7724a81b3a7c656fcbc42c6a88e3a036fa18bb5656efa05af62065b96b021620
-
Size
154KB
-
MD5
7036fbcf7d5f9678f05f8fcfd1d1a737
-
SHA1
81b921393d62a93644a3310ed34ad3b490714b58
-
SHA256
7724a81b3a7c656fcbc42c6a88e3a036fa18bb5656efa05af62065b96b021620
-
SHA512
d1167d4114430178fa83dd61b3d00fb3cbc9888410889c32f236ad8b0736a1b26f58cc86f512dbb923a68c7d7c57210a1977364423d704dc48c89015490ad367
-
SSDEEP
3072:hfZDi6knfzEITjX3rNlTjObFP3k+frN+LksQA:hsvgITjXZJOe+DgQu
Malware Config
Signatures
Files
-
7724a81b3a7c656fcbc42c6a88e3a036fa18bb5656efa05af62065b96b021620.dll windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ