DllGetClassObject
DllRegisterServer
PluginInit
RunObject
Behavioral task
behavioral1
Sample
bbd75898e0902d10171024ab7433f2921a3bf6ab8a7095d7fabcdde250db8691.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbd75898e0902d10171024ab7433f2921a3bf6ab8a7095d7fabcdde250db8691.dll
Resource
win10v2004-20220812-en
Target
bbd75898e0902d10171024ab7433f2921a3bf6ab8a7095d7fabcdde250db8691.dll
Size
13KB
MD5
c36deef28cfca679cc5250e979f651e3
SHA1
06338dc767c1990cfb141b573d65aaebfdf2b77f
SHA256
bbd75898e0902d10171024ab7433f2921a3bf6ab8a7095d7fabcdde250db8691
SHA512
707b03c8a4792f96dcd7d2a2b96564fa69e0c08acc50c495e2f2e8a68e052678d4381811f0b2cc27e51329b495c17a53621ed203517b005ed7a59fd2b32fd5b5
SSDEEP
192:sHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwRbZJXBAQYfPq/3KbL:s1Mf0gJSix2AA56RCiZV59GQYnq/6bL
icedid
3278515550
qvantumbrakesz.com
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WinHttpCloseHandle
WinHttpOpen
WinHttpSendRequest
WinHttpConnect
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSetStatusCallback
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpReadData
wsprintfW
memset
SwitchToThread
CreateFileA
GetLastError
WideCharToMultiByte
lstrlenW
VirtualProtect
VirtualAlloc
lstrcatA
lstrcpyA
GetTempPathA
CreateDirectoryA
LoadLibraryA
GetProcAddress
GetComputerNameExW
Sleep
ExitProcess
CreateThread
HeapAlloc
HeapFree
GetProcessHeap
HeapReAlloc
WriteFile
CloseHandle
GetTickCount64
GetUserNameW
LookupAccountNameW
SHGetFolderPathA
DllGetClassObject
DllRegisterServer
PluginInit
RunObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE