GetNewInf
Static task
static1
Behavioral task
behavioral1
Sample
5728a470749f7fb802e9a8d4dcd17865679af174eab0bb50649f58c5713efcbe.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5728a470749f7fb802e9a8d4dcd17865679af174eab0bb50649f58c5713efcbe.dll
Resource
win10v2004-20221111-en
General
-
Target
5728a470749f7fb802e9a8d4dcd17865679af174eab0bb50649f58c5713efcbe
-
Size
924KB
-
MD5
4b2482f5e0d1a487950c30590f2fd839
-
SHA1
406d255b6b8748a19b94874fd10650b8b4e45ca3
-
SHA256
5728a470749f7fb802e9a8d4dcd17865679af174eab0bb50649f58c5713efcbe
-
SHA512
20e505750f62ec169f688bc903071f38e9b0fb1656e28302e5473f2dc0415cc8bfcd798ea0b09d9b3252273c565cd21c167da26c96d232367d65e18a6a6acf96
-
SSDEEP
24576:buqf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLY:bV+s8KuqGaX0ToIBAUZLY
Malware Config
Signatures
Files
-
5728a470749f7fb802e9a8d4dcd17865679af174eab0bb50649f58c5713efcbe.dll windows x86
786b7bd5b5d9aef58b0ae2c290907587
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
WriteFile
GetProcAddress
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 804KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ