_�����ӳ���
Static task
static1
Behavioral task
behavioral1
Sample
9a60bff356dcc8c00e611cf5ef053c5a1653aa66a7d179b6819d97a5a086c59b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a60bff356dcc8c00e611cf5ef053c5a1653aa66a7d179b6819d97a5a086c59b.dll
Resource
win10v2004-20220812-en
General
-
Target
9a60bff356dcc8c00e611cf5ef053c5a1653aa66a7d179b6819d97a5a086c59b
-
Size
2.4MB
-
MD5
693b756fe7a7c64021cf6d84958975a7
-
SHA1
af8e5f6349177ea63e34cfba2d5074beab0d6eac
-
SHA256
9a60bff356dcc8c00e611cf5ef053c5a1653aa66a7d179b6819d97a5a086c59b
-
SHA512
3009e228421f32e9f0278b12b7a9f6fc422384449f39d27cee1a4d07d045df4ffd845bb1fd612e9e52147415850a89d1ed89725448e7b7cb3c412c288df1b069
-
SSDEEP
49152:oI9xswPCOW0M46auXVS00Ssy9e4IqkD3XjmOhDqJhN9CmwDjRQQiJDYUOx9h:ob8FM9VS0N915kDiKDqJhN9C7jRDil56
Malware Config
Signatures
Files
-
9a60bff356dcc8c00e611cf5ef053c5a1653aa66a7d179b6819d97a5a086c59b.dll windows x86
1d84e5c090cb683e3642a6a9e23bc179
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutPrepareHeader
ws2_32
htons
kernel32
TerminateProcess
user32
GetClassInfoA
gdi32
GetClipBox
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Exports
Exports
Sections
.text Size: 1.4MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ