LyirJCyvGh
Static task
static1
Behavioral task
behavioral1
Sample
78c5d780b2ca553cbd3fb0140813e0e1fb7c48491090df605f03c309d0086baf.dll
Resource
win7-20220414-en
General
-
Target
78c5d780b2ca553cbd3fb0140813e0e1fb7c48491090df605f03c309d0086baf.7z
-
Size
888KB
-
MD5
30b8ce14f25d91ce395d63ab2d0492c4
-
SHA1
e2304aedc60eb4fc542be8a9ed21a5e18a50ef69
-
SHA256
c23d3e1959f0ec87196cd71b426d25dd703256f6e93fdf90f19256660bc630c3
-
SHA512
7104b016fac3a4f054948d47d6e67f268728ef95965facd33fb0d9a3c71ec719cc1e5d4fbb3cd9b9f6722358c46516a5e2a974ddaf3e8d78c66f9e8b16b9016d
-
SSDEEP
24576:NPb4nwNM26EzcrTkmWVJF5Nzc9RWgQa7XT3Q:NPb4nPczcs3VJdmkgQGjg
Malware Config
Signatures
Files
-
78c5d780b2ca553cbd3fb0140813e0e1fb7c48491090df605f03c309d0086baf.7z.7z
Password: d,@&o0QInGqg&T]@X]}cIqSG}j@QRUqFIDRLCC0uJF%2eWqGI^
-
78c5d780b2ca553cbd3fb0140813e0e1fb7c48491090df605f03c309d0086baf.exe.dll windows x64
Password: d,@&o0QInGqg&T]@X]}cIqSG}j@QRUqFIDRLCC0uJF%2eWqGI^
0961e57709158541d151ca3f45b82efb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetStdHandle
SetCurrentDirectoryA
CreateFileA
GetFileInformationByHandle
CloseHandle
GetLastError
ConnectNamedPipe
DisconnectNamedPipe
HeapAlloc
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
OpenThread
GetModuleFileNameA
CreateNamedPipeA
CreateActCtxA
ActivateActCtx
DeactivateActCtx
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
GetStringTypeW
RaiseException
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW
Exports
Exports
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 853KB - Virtual size: 853KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 791KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ