Static task
static1
Behavioral task
behavioral1
Sample
b243c8a87c09186809d9e4f063fd96cc926addab754b32c501c28febdd33574b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b243c8a87c09186809d9e4f063fd96cc926addab754b32c501c28febdd33574b.dll
Resource
win10v2004-20221111-en
General
-
Target
b243c8a87c09186809d9e4f063fd96cc926addab754b32c501c28febdd33574b
-
Size
69KB
-
MD5
3e1891845c33d91ad3f77b3741670b90
-
SHA1
468df4bdc6df7a6aeaaf224f1d723f9c4547da92
-
SHA256
b243c8a87c09186809d9e4f063fd96cc926addab754b32c501c28febdd33574b
-
SHA512
f6c9c85e535a03dd12fc0e87c7b3de95d82348fc46afebc88d39ca3f0c25505171f105185f0bf355dbde22c895fb8ae8383d3f1ff8eeafe529ec7229f85da182
-
SSDEEP
1536:8qnhgTxal/LVYfaDXY8MHnTo0hhxaaKnT9uIzNu3r+Mzcv:eaLWT8S7v6TIjr+MzE
Malware Config
Signatures
Files
-
b243c8a87c09186809d9e4f063fd96cc926addab754b32c501c28febdd33574b.dll windows x86
262a03f935d312f0ba006571067752e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ExitThread
FlushFileBuffers
GetFileSize
GetSystemTimeAsFileTime
OpenFile
ReadFile
UnmapViewOfFile
VirtualAlloc
lstrcmpA
lstrcmpiA
msvcrt
__getmainargs
__p__commode
fwprintf
strpbrk
wcscat
wcscmp
wcscpy
wcslen
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ