wmiWeblib
Static task
static1
Behavioral task
behavioral1
Sample
f4a57b5c3311589f0d3a916c00f3314335008edc0023fda347f9a193dce28d8a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f4a57b5c3311589f0d3a916c00f3314335008edc0023fda347f9a193dce28d8a.dll
Resource
win10v2004-20221111-en
General
-
Target
f4a57b5c3311589f0d3a916c00f3314335008edc0023fda347f9a193dce28d8a
-
Size
84KB
-
MD5
caa84947c049651211f112e024b85869
-
SHA1
235ab77f5bc2e514cbdd4104a071a79aebc8aea9
-
SHA256
f4a57b5c3311589f0d3a916c00f3314335008edc0023fda347f9a193dce28d8a
-
SHA512
abf8f2ee049bceb4c69ab6e43ea09c0e303615fa1c9f287187c6d852a217ce63d950f66ebcd924851a7d345b212567eda5f6f0e652e9b450cb284560688d5e9c
-
SSDEEP
1536:5404KdElEycatmh9UKWILZLTJfvwHHaZf1m5wMT7Dv:5p4Hx9m3UKLZLdvfZdy7r
Malware Config
Signatures
Files
-
f4a57b5c3311589f0d3a916c00f3314335008edc0023fda347f9a193dce28d8a.dll windows x86
2154645a58b173bf43e4a87fa04c99a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
GlobalGetAtomNameA
LCMapStringA
GetCommState
FindResourceW
GetDateFormatA
GlobalFlags
AreFileApisANSI
CreateEventA
BackupWrite
SetFilePointer
BeginUpdateResourceA
GetAtomNameA
DuplicateHandle
IsValidCodePage
CreatePipe
IsProcessorFeaturePresent
LoadLibraryA
CompareStringW
GetProcAddress
shlwapi
PathIsFileSpecW
PathRenameExtensionW
gdi32
PolyDraw
GetMapMode
CreateCompatibleBitmap
SelectObject
SetSystemPaletteUse
StartPage
GetTextExtentPoint32A
SetColorAdjustment
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ