Static task
static1
Behavioral task
behavioral1
Sample
b9342ab22d053ba602ede112f7cd3d57b870aa7ebb87a65c13bfc95f6743a14e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9342ab22d053ba602ede112f7cd3d57b870aa7ebb87a65c13bfc95f6743a14e.dll
Resource
win10v2004-20221111-en
General
-
Target
b9342ab22d053ba602ede112f7cd3d57b870aa7ebb87a65c13bfc95f6743a14e
-
Size
310KB
-
MD5
9a1ea7b8001886754463b2bf0f059f5c
-
SHA1
87eff647b6e67cb44d11dc48421343fd7f7f63a8
-
SHA256
b9342ab22d053ba602ede112f7cd3d57b870aa7ebb87a65c13bfc95f6743a14e
-
SHA512
fcf4c16b09130923fd80e43f5cdd15394e4ac8a5e6b4d759f13afce13053a7cac0134acb2d79ec1e5e4f188ba0962a657a09f472ea6ea74bb4369286960d301f
-
SSDEEP
6144:iu85JIt8C2QRByvYu/E2fkLVyxW4ebcPpxdS9wrsuYGQkB:ifDgByv5/TcL8EYPn9rDWq
Malware Config
Signatures
Files
-
b9342ab22d053ba602ede112f7cd3d57b870aa7ebb87a65c13bfc95f6743a14e.dll windows x86
76cd2977bb52de580d011727e002ac48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FreeLibrary
GetCommandLineA
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
lstrcpyn
lstrlen
MultiByteToWideChar
OpenMutexA
ReadFile
SetEndOfFile
SetFilePointer
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
user32
GetWindowDC
LoadStringA
MessageBoxA
PeekMessageA
PostMessageA
gdi32
CombineRgn
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetPixel
GetStockObject
MoveToEx
Rectangle
RestoreDC
SaveDC
SelectObject
SetBkColor
SetBkMode
StretchBlt
TextOutA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CODE Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
CODE Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
BSS Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.bss Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE