InitModule
Static task
static1
Behavioral task
behavioral1
Sample
73f58af8c0d7c5389ed2559b8dc09b895a496ecfd78af24845b876b430e7ffd5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73f58af8c0d7c5389ed2559b8dc09b895a496ecfd78af24845b876b430e7ffd5.dll
Resource
win10v2004-20220812-en
General
-
Target
73f58af8c0d7c5389ed2559b8dc09b895a496ecfd78af24845b876b430e7ffd5
-
Size
76KB
-
MD5
9cc85b85b5efc42f387d952fdb5a7d52
-
SHA1
87421d1007c233225a6ca44abe5f0cecac75bf3c
-
SHA256
73f58af8c0d7c5389ed2559b8dc09b895a496ecfd78af24845b876b430e7ffd5
-
SHA512
4e93d57e77f4325f318d6bdbba9f91543c9c670fbba50ca2cd3f8cbaaa9eed259fb22df95008b71c5d7adb8d6d7c9332e73b92b7797dafbd4934b92230adff8b
-
SSDEEP
1536:TZavId3FbOxk5DqfXM6J2/QgoaLjEqIh1Ms3Df:TZavId35yNfVJ2Ygo3t3Df
Malware Config
Signatures
Files
-
73f58af8c0d7c5389ed2559b8dc09b895a496ecfd78af24845b876b430e7ffd5.dll windows x86
2accb0662a92731a16b616d3bf352e6f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileA
lstrcatA
GetTempPathA
WriteFile
lstrlenA
lstrcpynA
lstrcpyA
GetTempFileNameA
DeleteFileA
GetFileSize
Sleep
lstrcmpA
InitializeCriticalSection
ExitThread
GetLastError
HeapReAlloc
HeapAlloc
CloseHandle
HeapFree
HeapCreate
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetLocalTime
GetExitCodeThread
TerminateThread
WaitForSingleObject
GetVersionExA
FreeLibraryAndExitThread
GetModuleHandleA
GlobalAlloc
CreateProcessA
GlobalFree
HeapDestroy
CreateThread
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
VirtualAlloc
VirtualFree
WideCharToMultiByte
GetStdHandle
GetCPInfo
ExitProcess
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
InterlockedExchange
VirtualQuery
SetLastError
GetProcAddress
TerminateProcess
GetCurrentProcess
LoadLibraryA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetACP
GetOEMCP
user32
wsprintfA
advapi32
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
urlmon
URLDownloadToFileA
iphlpapi
GetNetworkParams
GetBestInterface
GetAdaptersInfo
ws2_32
ntohs
ntohl
inet_addr
sendto
recvfrom
WSAGetLastError
shutdown
WSACleanup
socket
gethostbyname
htons
connect
send
select
__WSAFDIsSet
closesocket
recv
WSAStartup
setsockopt
winmm
timeGetTime
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ