Static task
static1
Behavioral task
behavioral1
Sample
f479ae4927380e2c059d594992b3dd97c1fad919213f32d2144f83f40b8fd22b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f479ae4927380e2c059d594992b3dd97c1fad919213f32d2144f83f40b8fd22b.dll
Resource
win10v2004-20221111-en
General
-
Target
f479ae4927380e2c059d594992b3dd97c1fad919213f32d2144f83f40b8fd22b
-
Size
91KB
-
MD5
acbb873b8a0bd6834a4c2f06014419c5
-
SHA1
cbc08acfca30ef0fb784ba148d092b54ad00c90e
-
SHA256
f479ae4927380e2c059d594992b3dd97c1fad919213f32d2144f83f40b8fd22b
-
SHA512
7b40e05d05c62034350bc974302b2afe46bf61694fde5179216a0f90d9d5dc66ad3bdae04a7a15f7f2447b00de1b6a3acbee5e0109a08e9f229885f402bf66ad
-
SSDEEP
1536:eiDkofH3KW0M4s6k3mHLs2PUNR/lQe8w5hplvCgRXk0vZeZjstcRrUt:hkePTH6k2HLP8L/6mv9kc+AtcR
Malware Config
Signatures
Files
-
f479ae4927380e2c059d594992b3dd97c1fad919213f32d2144f83f40b8fd22b.dll windows x86
eef1780796204cbbda20be154a5ca9bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
WriteFile
GetStartupInfoA
GetLocaleInfoA
SearchPathW
SetStdHandle
VirtualProtect
GetCommandLineA
Sleep
GetOEMCP
SetLastError
HeapAlloc
GetACP
GetModuleHandleA
SetConsoleCP
GlobalAlloc
QueryPerformanceCounter
LocalFree
IsDBCSLeadByte
rpcrt4
I_RpcClearMutex
gdi32
CreateRectRgn
user32
FillRect
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 694B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 461B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 58B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ