Static task
static1
Behavioral task
behavioral1
Sample
9be55d3eea3a95a765bbeec7e8278cdda143e3c8c1d8c3d793f2d1be98c1f785.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9be55d3eea3a95a765bbeec7e8278cdda143e3c8c1d8c3d793f2d1be98c1f785.dll
Resource
win10v2004-20240611-en
General
-
Target
9be55d3eea3a95a765bbeec7e8278cdda143e3c8c1d8c3d793f2d1be98c1f785
-
Size
21KB
-
MD5
f0a38d98d3ddff54112d152e977f974c
-
SHA1
7720a5286af98c77bfeb210656be6ce3c9ec4ce4
-
SHA256
9be55d3eea3a95a765bbeec7e8278cdda143e3c8c1d8c3d793f2d1be98c1f785
-
SHA512
30ab467d62de6a6604a71b9733436e0151a3daab5794c6764fe41ba26d39685d1a1e44d89d9d685353fc47a5f475d3f8427e9e3e14fff8e4a71f5dabfba6a938
-
SSDEEP
384:8+HMwkB3SYjrVi7I/GFXD/DvQDM97BpBqSbLBnjH/Qm:xMxVbVgXTDTpqoLBnjfN
Malware Config
Signatures
Files
-
9be55d3eea3a95a765bbeec7e8278cdda143e3c8c1d8c3d793f2d1be98c1f785.dll windows:5 windows x64 arch:x64
c425afb3bc47a55665eacab437d00c9a
Code Sign
2a:4c:2e:c3:44:47:93:8f:4a:db:b2:f5:5d:35:fb:adCertificate
IssuerCN=ConEmu-Maximus5Not Before24/03/2010, 21:48Not After31/12/2039, 23:59SubjectCN=ConEmu-Maximus55f:bc:2d:fd:3f:94:a3:59:82:71:29:a1:cd:56:5c:c9:d3:61:22:9cSigner
Actual PE Digest5f:bc:2d:fd:3f:94:a3:59:82:71:29:a1:cd:56:5c:c9:d3:61:22:9cDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
MultiByteToWideChar
lstrlenW
lstrcpyW
lstrcpynW
HeapAlloc
HeapDestroy
HeapCreate
lstrcpyA
lstrcpynA
VirtualProtect
lstrlenA
GetModuleFileNameW
user32
wsprintfA
wsprintfW
FillRect
gdi32
DeleteObject
CreatePen
SelectObject
MoveToEx
LineTo
CreateSolidBrush
advapi32
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Exports
Exports
Configure
ConfigureW
ExitFAR
ExitFARW
GetGlobalInfoW
GetMinFarVersion
GetMinFarVersionW
GetPluginInfo
GetPluginInfoW
OnConEmuLoaded
OpenPlugin
OpenPluginW
OpenW
SetStartupInfo
SetStartupInfoW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ