DllGetClassObject
DllRegisterServer
PluginInit
RunObject
Static task
static1
Behavioral task
behavioral1
Sample
632f92e0ce6fd4ffd7efc36d38f649d98a6e132f43b0f697601ae4c07c3c9480.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
632f92e0ce6fd4ffd7efc36d38f649d98a6e132f43b0f697601ae4c07c3c9480.dll
Resource
win10v2004-20220414-en
Target
632f92e0ce6fd4ffd7efc36d38f649d98a6e132f43b0f697601ae4c07c3c9480.dll
Size
13KB
MD5
3edd8e5fb3a051fa54d9ab789dcf53e6
SHA1
9ea9d33148b7fcd7fae5132ccb114d636b0b9d45
SHA256
632f92e0ce6fd4ffd7efc36d38f649d98a6e132f43b0f697601ae4c07c3c9480
SHA512
1562bcac0f17287cda0728f3100ca57acb93b28c854a7a33b48ff0f1ab667c951c8504c6fa3993e6c50487d2b17d90558793cf7066e7140bad4331667dcea71d
SSDEEP
192:sHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwuPXBAQYfPq/3KbSf:s1Mf0gJSix2AA56RCiZV6GQYnq/6b
icedid
4105767744
frodupshopping.com
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WinHttpCloseHandle
WinHttpOpen
WinHttpSendRequest
WinHttpConnect
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSetStatusCallback
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpReadData
wsprintfW
memset
SwitchToThread
CreateFileA
GetLastError
WideCharToMultiByte
lstrlenW
VirtualProtect
VirtualAlloc
lstrcatA
lstrcpyA
GetTempPathA
CreateDirectoryA
LoadLibraryA
GetProcAddress
GetComputerNameExW
Sleep
ExitProcess
CreateThread
HeapAlloc
HeapFree
GetProcessHeap
HeapReAlloc
WriteFile
CloseHandle
GetTickCount64
GetUserNameW
LookupAccountNameW
SHGetFolderPathA
DllGetClassObject
DllRegisterServer
PluginInit
RunObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE