Static task
static1
Behavioral task
behavioral1
Sample
d27d618056327c6b2bdab8184c287b86f400737f5832053be386dcd5beeacdff.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d27d618056327c6b2bdab8184c287b86f400737f5832053be386dcd5beeacdff.dll
Resource
win10v2004-20221111-en
General
-
Target
d27d618056327c6b2bdab8184c287b86f400737f5832053be386dcd5beeacdff
-
Size
90KB
-
MD5
8c517376bd2ffe12c6d61df8d84f3f97
-
SHA1
c5d3129ab67f10a536ecfb575ec4b79dd8d76d45
-
SHA256
d27d618056327c6b2bdab8184c287b86f400737f5832053be386dcd5beeacdff
-
SHA512
a643ed336efebf1971ec0ab926eb6bb9bf22185baa77c6db1d7d1f9f2a61c12be5e718e3011a0add19f6757f97713cd3039af2dbc85c6e91c08d141a706e881a
-
SSDEEP
1536:t0ZXkaJuXNr6JMkAXi2JAtiS2rhO5BcW0mTOhRkt85yBpwb8hOP69h1wV09yqt:t8Hid6vAXi2miS2rhOzTOhGt8swgOP6P
Malware Config
Signatures
Files
-
d27d618056327c6b2bdab8184c287b86f400737f5832053be386dcd5beeacdff.dll windows x86
8bb8bf1493559ea54cd1fe1675d8b370
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ToAscii
ShowWindow
ShowScrollBar
ShowCursor
MessageBoxA
LoadImageA
LoadIconA
LoadAcceleratorsA
GetCursor
FillRect
EmptyClipboard
DrawTextA
DestroyWindow
CreateIconFromResourceEx
CreateDesktopW
CreateCursor
CopyImage
CharPrevA
kernel32
FreeResource
GetSystemTimeAsFileTime
GetSystemTime
GetPrivateProfileStringA
FindResourceA
EnumResourceLanguagesW
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
VirtualFree
UnmapViewOfFile
TlsSetValue
TlsFree
SetEndOfFile
MapViewOfFile
LocalAlloc
CloseHandle
EnterCriticalSection
GetTimeFormatA
oleaut32
SysFreeString
SysStringLen
VarBstrCat
SafeArrayCreate
OleTranslateColor
Sections
.text Size: 17KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ