Static task
static1
Behavioral task
behavioral1
Sample
c059f7d19d16e3e56e3fc64e3d767edb7eefbf6f6ef130f5d1a764869409337f.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c059f7d19d16e3e56e3fc64e3d767edb7eefbf6f6ef130f5d1a764869409337f.dll
Resource
win10v2004-20220812-en
General
-
Target
c059f7d19d16e3e56e3fc64e3d767edb7eefbf6f6ef130f5d1a764869409337f
-
Size
69KB
-
MD5
7337c79d4fcf22f28fe992ffdd402e1e
-
SHA1
3adb4d3c9eaf8b5252d79e4eee73e629bdbe5d5a
-
SHA256
c059f7d19d16e3e56e3fc64e3d767edb7eefbf6f6ef130f5d1a764869409337f
-
SHA512
7b3ffdcc710725c89de7d2dba731c0a29c7002de99a83ac237ee1806f3e4896fcbac55401ff46cfb751f23d9b7e81ce4bb3bf35809c82fbc8438169353c2292a
-
SSDEEP
1536:bnkhqJEN4a27/GP7QHM6VjDmz8W7CtOywkxQBwo14wmf:bkwJEGa27+PMP2NGVJ2z4w6
Malware Config
Signatures
Files
-
c059f7d19d16e3e56e3fc64e3d767edb7eefbf6f6ef130f5d1a764869409337f.dll windows x86
4de9ae33da1c5014c306f6f2a1ed3496
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
Sleep
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
CreateFileW
TerminateProcess
LocalAlloc
LocalFree
RtlMoveMemory
SetLastError
LocalReAlloc
MulDiv
WideCharToMultiByte
GlobalFree
VirtualProtect
GetCommandLineA
GlobalAlloc
gdi32
GetRegionData
ExtCreateRegion
IntersectClipRect
GetClipRgn
FillPath
StrokeAndFillPath
StrokePath
SelectClipRgn
CreateRectRgn
ExtSelectClipRgn
SelectClipPath
CreatePen
GetNearestColor
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
PlayEnhMetaFile
GetWinMetaFileBits
DeleteEnhMetaFile
CloseEnhMetaFile
ExtTextOutA
GetRgnBox
CombineRgn
DeleteObject
CreateDIBSection
GetDIBits
GetObjectA
GetStockObject
CreateFontIndirectA
GetRandomRgn
msvcr71
_except_handler3
memset
_adjust_fdiv
free
atoi
memcpy
_initterm
malloc
__CppXcptFilter
__dllonexit
_onexit
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ