Static task
static1
Behavioral task
behavioral1
Sample
40b0c4863398020f62db915c53af7f0ee89365d1ce4c9587fc9714e3bc72ffa7.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
40b0c4863398020f62db915c53af7f0ee89365d1ce4c9587fc9714e3bc72ffa7.dll
Resource
win10v2004-20221111-en
General
-
Target
40b0c4863398020f62db915c53af7f0ee89365d1ce4c9587fc9714e3bc72ffa7
-
Size
42KB
-
MD5
3dccd8de71cf621739f4af12300a5ce0
-
SHA1
c0429dc5175f4013472cb7fdfa516bbc793a0b52
-
SHA256
40b0c4863398020f62db915c53af7f0ee89365d1ce4c9587fc9714e3bc72ffa7
-
SHA512
2bf3e93cd3fa80d53d0d98abad93def4e0459eaf308ce527be7d13ed1f14c9c2b56f944d0715c0632fc2f509847cb102b3510189d709389e3a52bc52c7dfbd18
-
SSDEEP
768:6tqZEbwBg0VRMaltyX4PHugc80k87uih+7F0rIyUT1o9yia:SRb9EbPHugcLktF0DuoYi
Malware Config
Signatures
Files
-
40b0c4863398020f62db915c53af7f0ee89365d1ce4c9587fc9714e3bc72ffa7.dll windows x86
de91df502054d2e0812d8bd5f4505923
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
GetTickCount
GetStdHandle
QueryPerformanceCounter
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ