_start@16
Static task
static1
Behavioral task
behavioral1
Sample
6877e8beb46db20221f5ae88fcff60f0049e6477ef16038891a0d8e7c6964157.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6877e8beb46db20221f5ae88fcff60f0049e6477ef16038891a0d8e7c6964157.dll
Resource
win10v2004-20220812-en
General
-
Target
6877e8beb46db20221f5ae88fcff60f0049e6477ef16038891a0d8e7c6964157
-
Size
32KB
-
MD5
1f8799ea51b93a5d0370a7131eb7abf2
-
SHA1
1e05abbc75dd0fa6b299dd94f9bfc0c02e97a032
-
SHA256
6877e8beb46db20221f5ae88fcff60f0049e6477ef16038891a0d8e7c6964157
-
SHA512
fc8d38fe085fe6ecfff758e293762eb1e645a79476f87ff73bcf283fd83d287a2ee8690dad3cae0d5cc8d94a8af3d35ae5971e007787ccb206f818549a7ddbec
-
SSDEEP
384:Sv2pPkgjqPckzYBiGTWxf+IEOFfunjgH8bfEtwkDx:c2dkgjqhY7TWZhX8EcoqGx
Malware Config
Signatures
Files
-
6877e8beb46db20221f5ae88fcff60f0049e6477ef16038891a0d8e7c6964157.dll windows x86
78d394180cd478235602c08fcebe7545
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetLastError
CreateMutexA
GetTickCount
GetEnvironmentVariableA
GetCommandLineA
GetVolumeInformationA
WaitForSingleObject
CreateThread
WaitForMultipleObjects
ResetEvent
SetUnhandledExceptionFilter
SetErrorMode
ExitThread
GetTempPathA
FindFirstFileA
CopyFileA
FindNextFileA
MoveFileA
FindClose
GetSystemTime
CreateFileA
VirtualAlloc
VirtualFree
WriteFile
ReadFile
SetFilePointer
Sleep
CreateEventA
GetVersionExA
GetSystemInfo
DeleteFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
FreeLibrary
SetFileAttributesA
GetComputerNameA
advapi32
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegNotifyChangeKeyValue
msvcrt
strncat
fflush
_except_handler3
fprintf
_iob
memcmp
_getdiskfree
tolower
_initterm
_adjust_fdiv
fopen
fseek
ftell
fread
fwrite
fclose
strlen
strrchr
strcpy
srand
rand
exit
strncpy
strcat
malloc
memset
memcpy
free
strstr
_itoa
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ