Static task
static1
Behavioral task
behavioral1
Sample
dfa195ad26eae09717dbfd8988bc4d2bc3390be7cb4122c1e59303f9e3aaca78.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dfa195ad26eae09717dbfd8988bc4d2bc3390be7cb4122c1e59303f9e3aaca78.dll
Resource
win10v2004-20220812-en
General
-
Target
dfa195ad26eae09717dbfd8988bc4d2bc3390be7cb4122c1e59303f9e3aaca78
-
Size
50KB
-
MD5
0b598c7aa598b6d961ea82939392473a
-
SHA1
658e1b68c69117948bc42cbaad620dd18f0abe80
-
SHA256
dfa195ad26eae09717dbfd8988bc4d2bc3390be7cb4122c1e59303f9e3aaca78
-
SHA512
f0e9d515c2a7e8f77d611d928cc5fcebf714ccab0b8835ebfb268d1040391bffb91ca18c285811e4503f78fae8af2c850baee90146109e76e3c95ab430b0b241
-
SSDEEP
768:GLhW5ts4QzOT8Qltedk1Sia9kJmV2/TyE7bYlc1gCjdXenjJcb7Uw:GLUH0OT8Q7edkkiNJmuRYlc1g1uI
Malware Config
Signatures
Files
-
dfa195ad26eae09717dbfd8988bc4d2bc3390be7cb4122c1e59303f9e3aaca78.dll windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7hrgw31x Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g5vknzn5 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t1fu132m Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ