Static task
static1
Behavioral task
behavioral1
Sample
f9ba86f6b3a5b56af3949ead658cc13aed9593833c9a6f9f731923529f52bad2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9ba86f6b3a5b56af3949ead658cc13aed9593833c9a6f9f731923529f52bad2.dll
Resource
win10v2004-20220901-en
General
-
Target
f9ba86f6b3a5b56af3949ead658cc13aed9593833c9a6f9f731923529f52bad2
-
Size
97KB
-
MD5
1ebfbb45f030b45991bef92c21e5c6b4
-
SHA1
30ffe1d5f72595d944e4266575e42150fa13557d
-
SHA256
f9ba86f6b3a5b56af3949ead658cc13aed9593833c9a6f9f731923529f52bad2
-
SHA512
8a01446a0b01f7119ceb954ba5142c6b898a11471a2450f559d7de7c22c869299af207789bf839914d6795d4d4c13f04ffbc2d384bed4f9eed553397fd725189
-
SSDEEP
1536:FbeuzkkN4j+6kmF/AyNUvFL4UaLIYnV4WGU2mZPAW1k8jgWAy9GpR/9jb:FeMkhEFUUaLIYnVPd2KYmlUx9jb
Malware Config
Signatures
Files
-
f9ba86f6b3a5b56af3949ead658cc13aed9593833c9a6f9f731923529f52bad2.dll windows x86
f1dc948a256cf1da9cdb42389386d691
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ToAscii
RegisterClassW
OffsetRect
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW
kernel32
GetOEMCP
InterlockedIncrement
GetUserDefaultLCID
GetConsoleCP
FatalAppExitW
ExitProcess
lstrcatW
SetEnvironmentVariableW
IsDebuggerPresent
DebugBreak
IsBadReadPtr
advapi32
RegOpenKeyExW
RegCloseKey
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ