Static task
static1
Behavioral task
behavioral1
Sample
a1502ad941a9251270eaaa5b4ce8f1ba10031c5ac71b80fedecdf280a0c2433a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1502ad941a9251270eaaa5b4ce8f1ba10031c5ac71b80fedecdf280a0c2433a.dll
Resource
win10v2004-20220812-en
General
-
Target
a1502ad941a9251270eaaa5b4ce8f1ba10031c5ac71b80fedecdf280a0c2433a
-
Size
85KB
-
MD5
3319b32666777816478f684a3f99c991
-
SHA1
d52482fb42dcc988836c59a260055383c5a855df
-
SHA256
a1502ad941a9251270eaaa5b4ce8f1ba10031c5ac71b80fedecdf280a0c2433a
-
SHA512
ff1c6f6f25598934313f8abc472c85d9376741df1d3960eb0ed765b0aeb2b03d2f3c6eba26a55e7e99923a184267d49cc760ae567dfc57682597df0016348b9b
-
SSDEEP
1536:zVMz1CLSHsoK4T1/htECB7LfbmmIT3xfaIYRaKD82+1IQjsvV+LG:uz1NvT3tbB3cT3xf7YRacV+y
Malware Config
Signatures
Files
-
a1502ad941a9251270eaaa5b4ce8f1ba10031c5ac71b80fedecdf280a0c2433a.dll windows x86
2149478e2b5f146560f9169507c71cd8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DosDateTimeToFileTime
GetTickCount
GetVersionExA
IsBadCodePtr
lstrcpynA
GetComputerNameA
GetLastError
GetModuleHandleW
LoadLibraryA
InterlockedIncrement
InterlockedExchangeAdd
GetProcAddress
GetStartupInfoA
VirtualAlloc
VirtualProtect
lstrcmpiA
LoadLibraryExW
SetLastError
GetUserDefaultLCID
Sleep
InterlockedDecrement
user32
IsCharAlphaA
GetWindowPlacement
GetWindowContextHelpId
GetWindowRect
GetWindowTextLengthA
IsCharUpperA
IsChild
IsIconic
SetLastErrorEx
GetDlgItem
GetGUIThreadInfo
advapi32
GetUserNameA
IsValidSid
gdi32
GetBitmapDimensionEx
GetROP2
ole32
CoFileTimeNow
CoRevertToSelf
shell32
ord680
ord64
ord524
shlwapi
StrCmpNIW
StrRChrW
StrCSpnW
StrCmpNIA
StrSpnA
StrChrA
StrPBrkA
StrSpnW
StrTrimA
ChrCmpIA
msvcrt
_mbctoupper
_mbsnicoll
_mbsnextc
_mbsncmp
_mbslwr
_mbsicoll
_memicmp
_initterm
_adjust_fdiv
memchr
_mbscspn
_mbscpy
_mbschr
_mbbtype
_strdate
_wcsncoll
wcscoll
_wcsrev
_wcsnset
wcsrchr
wcscspn
_strrev
_strnicmp
strncmp
_stricoll
_mbccpy
_mbslen
_wstrdate
strpbrk
calloc
free
ldexp
_mbscmp
_mbsnbset
_mbsncoll
_pctype
_isctype
__mb_cur_max
_stricmp
wcscpy
_mbsrev
_ltoa
modf
_wcsicmp
_CIfmod
div
_mbstrlen
_scalb
_mbsicmp
strspn
_wcsnicoll
_mbctombb
_CIsinh
malloc
mbstowcs
memmove
wcslen
_getmbcp
_mbsncpy
_CIpow
_wgetenv
wcscmp
wcsstr
time
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ