Static task
static1
Behavioral task
behavioral1
Sample
8f0487d5d600cc351cf8697fb03959b73ce1b6d6069213afcbab7a473ef60136.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8f0487d5d600cc351cf8697fb03959b73ce1b6d6069213afcbab7a473ef60136.dll
Resource
win10v2004-20220812-en
General
-
Target
8f0487d5d600cc351cf8697fb03959b73ce1b6d6069213afcbab7a473ef60136
-
Size
366KB
-
MD5
1dd0a93b1e5d47ac7271a58df2fa6fb6
-
SHA1
1a4fb821922804c876fbf1af770eb7e6be276577
-
SHA256
8f0487d5d600cc351cf8697fb03959b73ce1b6d6069213afcbab7a473ef60136
-
SHA512
a4127cfbde41915802077652b94fac09b15a551cfafc611d5f3faa8300a7045801f4ccfdc3b767a35be12ae68a8e7f5edd2738ff92f641a3762d50e144335f5a
-
SSDEEP
6144:YGc2wq+LNe/GNfF3DTbIbRxESFqfYcEeH9xjh2Oo7Gro4ii/+HxDnMM:LcxBwYF3iRxESFdcEeHfjc7CV4M
Malware Config
Signatures
Files
-
8f0487d5d600cc351cf8697fb03959b73ce1b6d6069213afcbab7a473ef60136.dll windows x86
0eeec6b9afc700cace5a1a0beda6fa75
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
AppendMenuW
DrawTextW
CopyRect
LoadCursorA
AlignRects
IsMenu
BlockInput
IsWindow
GetFocus
GetWindowTextLengthA
CopyImage
DrawIcon
CreateIcon
GetDlgItem
kernel32
Sleep
DeleteFileW
GetFileTime
GetCommandLineA
CopyFileW
CopyFileExA
CopyFileA
ReadConsoleW
ExitThread
DeleteFileA
CreateProcessA
OpenFileMappingA
WriteFile
DeleteFileA
FindAtomA
GetCPInfo
CreateThread
ExitThread
GetComputerNameA
WriteFile
CreateProcessA
GlobalFree
DeleteFileW
advapi32
RegQueryInfoKeyA
RegCreateKeyW
RegOpenKeyW
RegQueryValueA
RegReplaceKeyA
RegOpenKeyA
RegLoadKeyA
RegQueryInfoKeyW
RegReplaceKeyW
RegCreateKeyExW
RegEnumKeyExW
RegCreateKeyExA
Sections
.tls Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tddt Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ