RKTV
Static task
static1
Behavioral task
behavioral1
Sample
5f2d895f66fe8611bf1c2956c98c865f502b4c68f2a1340580bc8b0e8216a491.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f2d895f66fe8611bf1c2956c98c865f502b4c68f2a1340580bc8b0e8216a491.dll
Resource
win10v2004-20220812-en
General
-
Target
5f2d895f66fe8611bf1c2956c98c865f502b4c68f2a1340580bc8b0e8216a491
-
Size
14KB
-
MD5
002164963f00d402f109bb0a1cd44bb9
-
SHA1
7fae9e69c196336a9bc0a9c5f664bf95787ee7d3
-
SHA256
5f2d895f66fe8611bf1c2956c98c865f502b4c68f2a1340580bc8b0e8216a491
-
SHA512
1b93cb556a7a4b19a6ca8a62c35a31125fd0d7237a493ff31870725372e451a2948a315bcc1bfc2e638cec3110aca48ab666771f031f8613ae5bed02aea8ca0c
-
SSDEEP
384:yYgm2LtRsjRK9Tx9vccccWfWn0khAKEYLy/:yYgm2LDk+KNkyY4
Malware Config
Signatures
Files
-
5f2d895f66fe8611bf1c2956c98c865f502b4c68f2a1340580bc8b0e8216a491.dll windows x86
0b6e2bf96b41bc72761771368075607e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryExA
GlobalAlloc
GetModuleHandleA
Sleep
GetWindowsDirectoryA
FreeLibrary
ExitProcess
GetCurrentProcess
GetLastError
MultiByteToWideChar
lstrcatW
GlobalFree
DeviceIoControl
user32
wsprintfA
advapi32
DeleteService
RegCloseKey
LookupPrivilegeValueA
msvcrt
strstr
psapi
GetModuleFileNameExA
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 586B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ