Static task
static1
Behavioral task
behavioral1
Sample
a20b0113b6942ddf756aee2f8c0eecb07672310bdb9eb19816dcfc70c5250a0f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a20b0113b6942ddf756aee2f8c0eecb07672310bdb9eb19816dcfc70c5250a0f.dll
Resource
win10v2004-20220812-en
General
-
Target
a20b0113b6942ddf756aee2f8c0eecb07672310bdb9eb19816dcfc70c5250a0f
-
Size
72KB
-
MD5
0bad6780f4db6b076c1e90a28d774897
-
SHA1
373a0e4e4a4fab4470144fd1010992434f6f5991
-
SHA256
a20b0113b6942ddf756aee2f8c0eecb07672310bdb9eb19816dcfc70c5250a0f
-
SHA512
2d5f8c703315234e7935fb6bbda8871fd0bc161986a08f08b448834afbb26301dd98c5f133b9588239234161b465f0a1dc1773442984399ad569b1c88cee0275
-
SSDEEP
768:WDis6K8ZgtmARHFkxszNUTODnX50c1jFgVL04kBt26PlhO7Jzx6GhRyLD4j6wmOg:2lT8ZqBWIUonJf5gJ0BM6ONIGQg88b
Malware Config
Signatures
Files
-
a20b0113b6942ddf756aee2f8c0eecb07672310bdb9eb19816dcfc70c5250a0f.dll windows x86
187279e1a185947f9979c01d7d758ed1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalUnlock
GetCommandLineA
GetStartupInfoA
ExitProcess
ntdll
iswdigit
NtOpenJobObject
ZwTerminateThread
ZwMapUserPhysicalPages
RtlLookupAtomInAtomTable
NtMapViewOfSection
NtAllocateUuids
ZwCreatePort
RtlCompactHeap
ZwCreateThread
RtlTimeToTimeFields
ZwCreateProcess
pow
RtlTimeToSecondsSince1980
RtlCompactHeap
NtRequestPort
RtlInitNlsTables
ZwOpenSemaphore
Sections
.gdata Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_PAGELK Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ