Static task
static1
Behavioral task
behavioral1
Sample
a6e4846d4e23411dccf134aecc299268f90c7065af39d0024f94cfb20617fd20.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6e4846d4e23411dccf134aecc299268f90c7065af39d0024f94cfb20617fd20.dll
Resource
win10v2004-20220812-en
General
-
Target
a6e4846d4e23411dccf134aecc299268f90c7065af39d0024f94cfb20617fd20
-
Size
366KB
-
MD5
3e5736f6b2d116648d8007899eb64340
-
SHA1
60c1d195421a5cd951b58b22cb526476877f1801
-
SHA256
a6e4846d4e23411dccf134aecc299268f90c7065af39d0024f94cfb20617fd20
-
SHA512
ef42a11013ef5f1baba04b8392ef1b93ca5bfb80e2fffa8f091b67e620c7cae5f949e43eb670468e89e7932a1d836329c4ee34b7c15cb98a58b3e34e91cbf688
-
SSDEEP
6144:5NPO4ONVgTin4LQxbs6oqbNCmOlVtKwDm3VwHNrLVlRAD1COvqHgCgOINUOVU:5Y7VI+yEb9RN+ntZjABCZHJgOINRy
Malware Config
Signatures
Files
-
a6e4846d4e23411dccf134aecc299268f90c7065af39d0024f94cfb20617fd20.dll windows x86
6b2debc263bfb8b9e7fc2acbbf1a4929
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteAtom
CreateProcessA
ReadConsoleA
GetStdHandle
GetLastError
GetFileTime
FindFirstFileA
GetCommandLineA
CopyFileExA
DeleteFileA
GlobalFree
CreateDirectoryA
advapi32
RegEnumKeyA
RegOpenKeyW
RegCreateKeyExW
RegQueryValueA
RegDeleteValueW
RegDeleteValueA
RegOpenKeyA
RegReplaceKeyA
RegEnumKeyExW
RegLoadKeyW
RegEnumValueA
RegCreateKeyW
RegFlushKey
RegQueryValueW
Sections
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adxt Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 421B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ