DllGetClassObject
DllRegisterServer
PluginInit
RunObject
Static task
static1
Behavioral task
behavioral1
Sample
c999c63803e6f12ad88fdb8b16b3673f631532ddf049ac740c4b4290f6b166de.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c999c63803e6f12ad88fdb8b16b3673f631532ddf049ac740c4b4290f6b166de.dll
Resource
win10v2004-20220414-en
Target
c999c63803e6f12ad88fdb8b16b3673f631532ddf049ac740c4b4290f6b166de
Size
389KB
MD5
1bba35498fa89e6de3f72796aef22ec9
SHA1
5c8232f4261c1637d9801e22a0be719e70340623
SHA256
c999c63803e6f12ad88fdb8b16b3673f631532ddf049ac740c4b4290f6b166de
SHA512
9bd7892cb2495a3fedf92acdccf4981eeebf6e6ee023cd520e63000dc5bbb300f560fdf6147ab4157cfb046dac7ce5dc70cd6bfb524951121680179b97bf8458
SSDEEP
6144:ph5XIvSQ7/ibuzCw/ziYnPSh5XIvSQ7/ibuzCw/ziYnebMFIGjY0bw:z5XU97awriYnPo5XU97awriYnSMLYJ
icedid
2528826304
morginakolim.com
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WinHttpCloseHandle
WinHttpOpen
WinHttpSendRequest
WinHttpConnect
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSetStatusCallback
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpReadData
wsprintfW
memset
SwitchToThread
CreateFileA
GetLastError
WideCharToMultiByte
lstrlenW
VirtualProtect
VirtualAlloc
lstrcatA
lstrcpyA
GetTempPathA
CreateDirectoryA
LoadLibraryA
GetProcAddress
GetComputerNameExW
Sleep
ExitProcess
CreateThread
HeapAlloc
HeapFree
GetProcessHeap
HeapReAlloc
WriteFile
CloseHandle
GetTickCount64
GetUserNameW
LookupAccountNameW
SHGetFolderPathA
DllGetClassObject
DllRegisterServer
PluginInit
RunObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE