ImportRootCer
Static task
static1
Behavioral task
behavioral1
Sample
4e2529a3ba865f6e1b48a847ec8e2e170545044858997c01d4d4532e3cdb9d74.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4e2529a3ba865f6e1b48a847ec8e2e170545044858997c01d4d4532e3cdb9d74.dll
Resource
win10v2004-20220812-en
General
-
Target
4e2529a3ba865f6e1b48a847ec8e2e170545044858997c01d4d4532e3cdb9d74
-
Size
61KB
-
MD5
b6d0d2bdc680eb3752b630581f699832
-
SHA1
d2b0ab46d844b8dc5ff618c40a9f64901d6c350a
-
SHA256
4e2529a3ba865f6e1b48a847ec8e2e170545044858997c01d4d4532e3cdb9d74
-
SHA512
ed9a4ed5bfac14ae49e1b2c08f5718d833053a5d48ad35f7412d5337e3c4bb39780d687572948d3a646349b745cea83e07c8da40817cca452291319ce6ee0095
-
SSDEEP
768:cnpjsPRXuaz8zgM9ocJ6pdrF1Wmw/H2nVaBBF2AHREBnplV9CDktuGw:GjsPpV8sM9ocJ6HWmwf2nIGflVzw
Malware Config
Signatures
Files
-
4e2529a3ba865f6e1b48a847ec8e2e170545044858997c01d4d4532e3cdb9d74.dll windows x86
48eb0ac9cdd8384d7e0a13c014a7d9cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
InterlockedIncrement
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceA
GetSystemInfo
VirtualProtect
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
ExitProcess
RtlUnwind
HeapFree
GetCurrentThreadId
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
ole32
CoCreateInstance
CoInitialize
oleaut32
SysFreeString
GetErrorInfo
SysAllocString
VariantClear
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ