Static task
static1
Behavioral task
behavioral1
Sample
d67280f811294fbcd846d15b04c278c49bdc5cffb622039453d31fb7d592ae8b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d67280f811294fbcd846d15b04c278c49bdc5cffb622039453d31fb7d592ae8b.dll
Resource
win10v2004-20220901-en
General
-
Target
d67280f811294fbcd846d15b04c278c49bdc5cffb622039453d31fb7d592ae8b
-
Size
88KB
-
MD5
029f637174206618532ec5ed16a863ec
-
SHA1
b3bef09e6265853f734b638a9d06b0370f2e5606
-
SHA256
d67280f811294fbcd846d15b04c278c49bdc5cffb622039453d31fb7d592ae8b
-
SHA512
62401811eae8c7bddac75c94e766d0b76242003805a1a4b737b6c671f95f8c8008649b34ac2e946d3f5bc6ad5bde5aa1f55f344b49b7d6fb9153a86adac54b68
-
SSDEEP
1536:CJxnVhWrYie/cCOulfztEfONm6OIomqmriUT/A65NOH5:CfnvZkCO837Ow/eh6zM5
Malware Config
Signatures
Files
-
d67280f811294fbcd846d15b04c278c49bdc5cffb622039453d31fb7d592ae8b.dll windows x86
71875217c01ed81ffbe0e514ea046863
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
ConvertThreadToFiber
DeleteVolumeMountPointA
ExpandEnvironmentStringsA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.rc3sec0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rc3sec1 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec2 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ