Static task
static1
Behavioral task
behavioral1
Sample
9deb6366671a96b388e59eee9a824aef4be7ecb33b1d7430f1c5a7497d5299af.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9deb6366671a96b388e59eee9a824aef4be7ecb33b1d7430f1c5a7497d5299af.dll
Resource
win10v2004-20220812-en
General
-
Target
9deb6366671a96b388e59eee9a824aef4be7ecb33b1d7430f1c5a7497d5299af
-
Size
265KB
-
MD5
4817b253fa1834689826d74ce601db8a
-
SHA1
84cf5a39c1f9cb8201f7f31d865de239e7e11adb
-
SHA256
9deb6366671a96b388e59eee9a824aef4be7ecb33b1d7430f1c5a7497d5299af
-
SHA512
ef65f183ba81ffb70794c9d771db063d2a9bd2fcc982934c7a2f06ac79e756552f8996f34a750db5339a7f08dc68da67a3c7e8e5b1532937f6af695608593373
-
SSDEEP
6144:ENiU5dL835YgJxyY2ZYXTy1G86ELPw2Z5ompbidxHbdZvGQU:i5dL835YgTn2ZYDy1xVPTxidxHTvGQ
Malware Config
Signatures
Files
-
9deb6366671a96b388e59eee9a824aef4be7ecb33b1d7430f1c5a7497d5299af.dll windows x86
8564ce19c988c729abf1b2e5935001f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
WaitForSingleObject
CreateSemaphoreW
EnumDateFormatsExA
ReleaseSemaphore
GetCommandLineW
GetProcAddress
LoadLibraryW
FreeLibrary
DeleteFileW
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualProtect
GetCurrentThreadId
FoldStringW
GetLocaleInfoW
Sleep
oleaut32
SafeArrayDestroyDescriptor
SafeArrayCreateEx
QueryPathOfRegTypeLib
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen
msvfw32
ICInfo
Sections
.text Size: 175KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ