showUserMan
Static task
static1
Behavioral task
behavioral1
Sample
c3b26ed86541bd13db970043a88bca1d189a81b3e3c939e9c9135ff418b524e9.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c3b26ed86541bd13db970043a88bca1d189a81b3e3c939e9c9135ff418b524e9.dll
Resource
win10v2004-20230220-en
General
-
Target
c3b26ed86541bd13db970043a88bca1d189a81b3e3c939e9c9135ff418b524e9
-
Size
2.0MB
-
MD5
5521112a2adcfc3d0501f14f8a0bd6d1
-
SHA1
2814fd40cfb3f4c2ee79a7659d9e6b9aa4e905b3
-
SHA256
c3b26ed86541bd13db970043a88bca1d189a81b3e3c939e9c9135ff418b524e9
-
SHA512
acfcda8a466a187539a5ab818342c2c690a9e2dc7bee778c95b389931170603a0d5ace30a251da164278da7f20644a8a674209e1ec69e3622c043dd555f305ca
-
SSDEEP
49152:tYd3mgk4NT0zRmIgxz6dC6GhjVTVe4YzBuCL6ebimJA:tYFmg350zRJgEf6jVYzLLXPJ
Malware Config
Signatures
Files
-
c3b26ed86541bd13db970043a88bca1d189a81b3e3c939e9c9135ff418b524e9.dll windows x86
4a5e1ec8769c627f09c613365b0f8d94
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UpdateColors
ole32
CreateStreamOnHGlobal
comctl32
InitializeFlatSB
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
comdlg32
ChooseFontA
winmm
sndPlaySoundA
Exports
Exports
Sections
CODE Size: 1.9MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE