Static task
static1
Behavioral task
behavioral1
Sample
a4b881eb259879d12c0841d854174b351e60c0c4564d47ab63973e6ef0b56341.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4b881eb259879d12c0841d854174b351e60c0c4564d47ab63973e6ef0b56341.dll
Resource
win10v2004-20220812-en
General
-
Target
a4b881eb259879d12c0841d854174b351e60c0c4564d47ab63973e6ef0b56341
-
Size
217KB
-
MD5
cd6920d7a4d6f77759503fe0e056e9e2
-
SHA1
7bb8febe4591ba24942b1cfaf9901c6d73ee7531
-
SHA256
a4b881eb259879d12c0841d854174b351e60c0c4564d47ab63973e6ef0b56341
-
SHA512
9d3fb13ea230074da3b03867313d716e2d258a1bbbd0235b1b4c84f537b0708ab0ffd6d7a97dbedd17fba948ea51b245de04beef35b4b8356e1df4c6537f35de
-
SSDEEP
6144:v0vile1aqzDqpkRkSrA/s43k9Vxh3J+582:vfS+SS9K3k5h
Malware Config
Signatures
Files
-
a4b881eb259879d12c0841d854174b351e60c0c4564d47ab63973e6ef0b56341.dll windows x86
06b3c0b66bd127ce88ba24f20846331c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetWindowInfo
Sections
.text Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hax0 Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.hax1 Size: - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.hax2 Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ