setup
Static task
static1
Behavioral task
behavioral1
Sample
fe13e1581b5e6fe521b4bdeb7fd8e441ec780018921c52817c37737711ef1c20.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe13e1581b5e6fe521b4bdeb7fd8e441ec780018921c52817c37737711ef1c20.dll
Resource
win10v2004-20220812-en
General
-
Target
fe13e1581b5e6fe521b4bdeb7fd8e441ec780018921c52817c37737711ef1c20
-
Size
385KB
-
MD5
3458566c5994e8c1a1f3e6b94b9508b4
-
SHA1
3ca3ebde98c52f5cc3223d53f1b7562960272fcc
-
SHA256
fe13e1581b5e6fe521b4bdeb7fd8e441ec780018921c52817c37737711ef1c20
-
SHA512
02f550b74b73e029d66df4cde71ad9c36e4921cd4d0ceb51a2e9da649ddd512c531e5f78d71291e0d55f261da703ec7cadea976072bc4c26008ce665fbc7aed2
-
SSDEEP
12288:bIZuSEXIS6HxVOlxpQQDsaIAoEoaKUtyc6Y:bI3EYjL5Jqyh
Malware Config
Signatures
Files
-
fe13e1581b5e6fe521b4bdeb7fd8e441ec780018921c52817c37737711ef1c20.dll windows x86
9f299af6f38ac1ec9063d0d0f2523bc0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadStringA
gdi32
GetTextCharsetInfo
advapi32
QueryServiceStatus
ole32
CoTaskMemFree
oleaut32
VarUI4FromStr
setupapi
SetupIterateCabinetA
comctl32
InitCommonControlsEx
Exports
Exports
Sections
.text Size: 376KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE