Static task
static1
Behavioral task
behavioral1
Sample
72f8f2f043aab080d9b667db4e811502ef53f1141bc95d32696151e646c1d61b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
72f8f2f043aab080d9b667db4e811502ef53f1141bc95d32696151e646c1d61b.dll
Resource
win10v2004-20220812-en
General
-
Target
72f8f2f043aab080d9b667db4e811502ef53f1141bc95d32696151e646c1d61b
-
Size
66KB
-
MD5
b2474967b4d0507d34c438eb801289b0
-
SHA1
b4cef7e8ad1507ddb77f160cb6667bddc980f796
-
SHA256
72f8f2f043aab080d9b667db4e811502ef53f1141bc95d32696151e646c1d61b
-
SHA512
48a79d5078bccf921ef8e6b881cfb8e6da6049092446fb8afcf9e2cd2e4e0d43c5ee6577b364fba0f6d490777f4148f73cdc4daadce6d57965cc08b92b55771f
-
SSDEEP
1536:anvq7DyxIqya04FxB7PMBiRQkZaWLtgVeSS+LAkRg:anUmfya04FH7PL60Rgw+xS
Malware Config
Signatures
Files
-
72f8f2f043aab080d9b667db4e811502ef53f1141bc95d32696151e646c1d61b.dll windows x86
6f069b236a222984adcfa511bd42a5dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
EnumResourceLanguagesA
ExitProcess
ExitThread
GetStartupInfoA
GetTimeFormatA
LoadResource
MapViewOfFile
TlsGetValue
VirtualAlloc
lstrcmpA
msvcrt
wcscpy
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ