ExportToScreenSaver
Static task
static1
Behavioral task
behavioral1
Sample
c9fa5791c82c3a2199236804f334452cda1ace0d10143e63ddc58687876681c8.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c9fa5791c82c3a2199236804f334452cda1ace0d10143e63ddc58687876681c8.dll
Resource
win10v2004-20230220-en
General
-
Target
c9fa5791c82c3a2199236804f334452cda1ace0d10143e63ddc58687876681c8
-
Size
216KB
-
MD5
0b5b0cfdcff76ac23b22d69e69791eac
-
SHA1
6f3b8c93e64df1393b2b978556701a1d2c845032
-
SHA256
c9fa5791c82c3a2199236804f334452cda1ace0d10143e63ddc58687876681c8
-
SHA512
edfbc603b48a4ce8a76e6940dc79e27af272981e099b6bcdd8f068fc1c6b01f129025c2a55de590add1d767723265d50d32b66f931fae94b654dabf016fe35b0
-
SSDEEP
3072:Kfc8Nvug4cg2fU1Q9DQX/1dK9xQ/IYVMR3DhliPmh8q13tXe:KNvuzcg2fU1Q90X/1dK96IYVYuPmSm3Q
Malware Config
Signatures
Files
-
c9fa5791c82c3a2199236804f334452cda1ace0d10143e63ddc58687876681c8.dll windows x86
3807fefd1d4a146bf65b52ca0b53fe27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
CopyFileW
GetWindowsDirectoryW
EndUpdateResourceW
UpdateResourceW
BeginUpdateResourceW
ReadFile
GetFileSize
FreeResource
CloseHandle
WriteFile
SizeofResource
LockResource
LoadResource
FindResourceW
LoadLibraryW
CreateFileW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
ExitProcess
shell32
ShellExecuteW
msvcr71
??2@YAPAXI@Z
__security_error_handler
_except_handler3
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
??3@YAXPAX@Z
wcslen
wcscpy
swprintf
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 822B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ