ProcDeListing
Static task
static1
Behavioral task
behavioral1
Sample
ffaf6bec1669319d66ded262be5af6b9ecc788e69b7b0db2c202dd46e3b87e09.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffaf6bec1669319d66ded262be5af6b9ecc788e69b7b0db2c202dd46e3b87e09.dll
Resource
win10v2004-20221111-en
General
-
Target
ffaf6bec1669319d66ded262be5af6b9ecc788e69b7b0db2c202dd46e3b87e09
-
Size
7KB
-
MD5
0c4531ceaeea3cca031ecbdd13f90cc3
-
SHA1
26299125a411053248c4c530008bde43f270115a
-
SHA256
ffaf6bec1669319d66ded262be5af6b9ecc788e69b7b0db2c202dd46e3b87e09
-
SHA512
e46582b73a1b617b5c1d920ec6910243096109a0f71cf7da94ae5bb1f95068a96ddbc05caf6c87308547a23b9c82519e4db5e485c98e9ade462524ef89e85bb9
-
SSDEEP
96:nP+mDejAZ+RSSSSM6XO5EgZ72nYcTuMnpOV/mvRqx7F4Uz:nmuZ+RSSSSL+PcTuMpm7F1z
Malware Config
Signatures
Files
-
ffaf6bec1669319d66ded262be5af6b9ecc788e69b7b0db2c202dd46e3b87e09.dll windows x86
4aef5c20b74a50ccf54501baa67b4158
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
TlsFree
LocalFree
HeapAlloc
TlsGetValue
TlsAlloc
Sleep
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
TlsSetValue
GetVersion
HeapFree
LocalAlloc
advapi32
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
user32
SendMessageA
GetWindowTextA
GetWindowLongA
GetClassNameA
CallNextHookEx
Exports
Exports
Sections
CODE Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ