EventCallback
Static task
static1
Behavioral task
behavioral1
Sample
c4cbdb7d3ed3d64aadc36068b4258ef06598cf03342b010cc966b1a76a3da7b3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4cbdb7d3ed3d64aadc36068b4258ef06598cf03342b010cc966b1a76a3da7b3.dll
Resource
win10v2004-20220812-en
General
-
Target
c4cbdb7d3ed3d64aadc36068b4258ef06598cf03342b010cc966b1a76a3da7b3
-
Size
92KB
-
MD5
661deec711e229ff549832a383c8845e
-
SHA1
4c447381835b94f7b6dcc8e6344eb2e43577b68c
-
SHA256
c4cbdb7d3ed3d64aadc36068b4258ef06598cf03342b010cc966b1a76a3da7b3
-
SHA512
82dcca0501315d4e49c869fa9cb0c3ff6b38f3b236931608ba3f16dba148ea88418c8e55864a2c0fafc04421f6b033a2eada3e644de49735242174d8c2fc0384
-
SSDEEP
1536:TjB5dFlns//faTquE7JqqQoZ6/2mF5JrSW2RYD/EqAZmbw+7j/2R:T95dbs//faT+7J7u2mFDuWcYw7Zmbx2R
Malware Config
Signatures
Files
-
c4cbdb7d3ed3d64aadc36068b4258ef06598cf03342b010cc966b1a76a3da7b3.dll windows x86
33490371b381bbec7270524e8cb6f103
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pncrt
_splitpath
fopen
fwrite
_stricmp
fseek
fgets
fprintf
strrchr
malloc
free
_onexit
__dllonexit
_adjust_fdiv
_initterm
strstr
strncpy
fclose
_strnicmp
advapi32
RegQueryInfoKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
user32
GetSystemMetrics
CharNextA
wsprintfA
CharLowerA
kernel32
lstrlenA
GetPrivateProfileStringA
CreateDirectoryA
CreateFileA
GetLastError
CloseHandle
lstrcpyA
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
MoveFileA
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE