Static task
static1
Behavioral task
behavioral1
Sample
9febd308f3ef9c0c2e9b77d27b46c760c39b0d7818ae4507b6e506a818a26dbe.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9febd308f3ef9c0c2e9b77d27b46c760c39b0d7818ae4507b6e506a818a26dbe.dll
Resource
win10v2004-20230220-en
General
-
Target
9febd308f3ef9c0c2e9b77d27b46c760c39b0d7818ae4507b6e506a818a26dbe
-
Size
78KB
-
MD5
cd48ef7b10b1f056efc4a5e60ecf8bf4
-
SHA1
a4a7e8f3b982ad01d0476b1a32e241788894a0b1
-
SHA256
9febd308f3ef9c0c2e9b77d27b46c760c39b0d7818ae4507b6e506a818a26dbe
-
SHA512
7842589f5656ed9430e33b3dbf7ca1626d84357171e2d631fc26ae375a5dcd23641bb4a8471bf407c3ca6946d5a581cd4acbfcae1f39d98901a5c0a22fee8c21
-
SSDEEP
1536:Ts2MO5Xu2TP66w9wsffB5bPef2eNB/H5dcTUf:TOgXu2TSFwsffBVPef3ffcU
Malware Config
Signatures
Files
-
9febd308f3ef9c0c2e9b77d27b46c760c39b0d7818ae4507b6e506a818a26dbe.dll windows x86
c4113fddb254dccd261ff8bea32c2391
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
LoadLibraryW
TerminateThread
GetProcAddress
LoadLibraryA
HeapSize
GetStringTypeW
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
IsProcessorFeaturePresent
user32
MessageBoxA
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ