Static task
static1
Behavioral task
behavioral1
Sample
bfc4b4207c4d5292e8d588a2a96b47a36471e9bf7c89988e32d88da291b6f369.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bfc4b4207c4d5292e8d588a2a96b47a36471e9bf7c89988e32d88da291b6f369.dll
Resource
win10v2004-20220901-en
General
-
Target
bfc4b4207c4d5292e8d588a2a96b47a36471e9bf7c89988e32d88da291b6f369
-
Size
16KB
-
MD5
cc0bc21d7b2dcee5c559c52df8c18312
-
SHA1
78d6d607753ba6404ba6f48abdf53c30bf0534c3
-
SHA256
bfc4b4207c4d5292e8d588a2a96b47a36471e9bf7c89988e32d88da291b6f369
-
SHA512
c188d6b2e8b0f9fac4db9636a37f188eb6dbb80b0b7517c416c8e0d634c7a431ab387080d379b672ca074c77108e73da776bb2c87ca9b15bce06a618c44ae0e8
-
SSDEEP
96:tU0105G2TEbE7yRMwJXmwZOEXgRMYdCmAFiYVXwdyfg4+kDui+Gf+U+0+3u+o+w/:K05ZjgRZ/bpkeJzrSoFp8jYA8zrs
Malware Config
Signatures
Files
-
bfc4b4207c4d5292e8d588a2a96b47a36471e9bf7c89988e32d88da291b6f369.dll windows x86
f61cf64b3b4b874048d30d3e45a05e4b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateThread
DisableThreadLibraryCalls
FindAtomA
GetAtomNameA
GetCurrentProcess
GetModuleHandleA
ReadProcessMemory
Sleep
VirtualProtect
msvcrt
__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memcpy
user32
GetAsyncKeyState
MessageBeep
MessageBoxA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 224B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ