_tDllFunc@4
Static task
static1
Behavioral task
behavioral1
Sample
cb50faf55da240a434a68928262e33b0f07e0b8154836b9a7f2b766d181ab854.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cb50faf55da240a434a68928262e33b0f07e0b8154836b9a7f2b766d181ab854.dll
Resource
win10v2004-20220901-en
General
-
Target
cb50faf55da240a434a68928262e33b0f07e0b8154836b9a7f2b766d181ab854
-
Size
7KB
-
MD5
08747dcf73904b9f95a910b8f06cc954
-
SHA1
1ff7981eaa03798114d9b830c4d13602feab4db9
-
SHA256
cb50faf55da240a434a68928262e33b0f07e0b8154836b9a7f2b766d181ab854
-
SHA512
d5efc89c9c627dc0ed7615b01f482f8b734ac4bb415ccf600bb7bae71fe9b5f6931bbc17634049bfc70e2a9c1c0072a66d79de1f48de7ff153560ad6884e27dd
-
SSDEEP
192:LwdW1UF6WvaripPTiM3Sn02O2NCPm3jK3Xf6Akq42fY9:EY6vBpriMyCu3qP6eg9
Malware Config
Signatures
Files
-
cb50faf55da240a434a68928262e33b0f07e0b8154836b9a7f2b766d181ab854.dll windows x86
9019f95743efac213ffc133e88c6a467
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
lstrcmpiA
lstrlenA
Sleep
WinExec
lstrcpyA
lstrcatA
CreateThread
GetSystemDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
msvcr80
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_decode_pointer
free
_encoded_null
_malloc_crt
_encode_pointer
_adjust_fdiv
memset
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ