Static task
static1
Behavioral task
behavioral1
Sample
5cf0cea1ef911cd9c3ecc026a8bcb22367f93bddf31f3c7da227bb21ff71e3a6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5cf0cea1ef911cd9c3ecc026a8bcb22367f93bddf31f3c7da227bb21ff71e3a6.dll
Resource
win10v2004-20221111-en
General
-
Target
5cf0cea1ef911cd9c3ecc026a8bcb22367f93bddf31f3c7da227bb21ff71e3a6
-
Size
793KB
-
MD5
b2a18e12857696084b57a6fc6e696070
-
SHA1
a02aaf3e7096b379b161554db7e35ab06a648edd
-
SHA256
5cf0cea1ef911cd9c3ecc026a8bcb22367f93bddf31f3c7da227bb21ff71e3a6
-
SHA512
614865ec8ff49087c51302c434f4a2310cb3068b61ecf65f74a848d6a4bc6dff972cd946a27a6245d69c4597399c4b2457f2339876707788980be7f26642b08f
-
SSDEEP
3072:c69+V3gzNmnup/dC0GDUfEDvbqnGUr1KcEkwWg69+:c69+QEurYUfOviwcEkq69+
Malware Config
Signatures
Files
-
5cf0cea1ef911cd9c3ecc026a8bcb22367f93bddf31f3c7da227bb21ff71e3a6.dll windows x86
f2c68ff336b34470cd60b6a75aa14a46
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetTimeZoneInformation
ConvertFiberToThread
RtlFillMemory
LoadLibraryW
ntdll
RtlInitializeRXact
RtlpUnWaitCriticalSection
RtlFindLeastSignificantBit
user32
ValidateRgn
gdi32
DrawEscape
GetTextCharacterExtra
GetROP2
GdiGetBatchLimit
FillPath
CreateCompatibleBitmap
CreateBitmap
SelectClipPath
SetArcDirection
SetMapperFlags
SetRectRgn
SetTextColor
SetSystemPaletteUse
GetTextColor
shell32
SHSetInstanceExplorer
rasapi32
RasGetCustomAuthDataW
RasSetOldPassword
winfax
FaxSendDocumentA
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ