Krpdms
Static task
static1
Behavioral task
behavioral1
Sample
de8bd9f9c36caad6a1ae6ea98ef597d72d11835c5090d495b12609ca2757241b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
de8bd9f9c36caad6a1ae6ea98ef597d72d11835c5090d495b12609ca2757241b.dll
Resource
win10v2004-20220812-en
General
-
Target
de8bd9f9c36caad6a1ae6ea98ef597d72d11835c5090d495b12609ca2757241b
-
Size
592KB
-
MD5
6cfb686f227e06b60e83d8323c24f2c0
-
SHA1
9ff8100951adf4fe8b6ca26eef43db30ee0bb722
-
SHA256
de8bd9f9c36caad6a1ae6ea98ef597d72d11835c5090d495b12609ca2757241b
-
SHA512
62407ce3dc9101b1404efd53d2266a10ba5660d9adb2926ca52ac1f048e93c02baede69c2bd17ff2f5ebebaed5d2a055702e84c1240f8507221141c648afbb77
-
SSDEEP
12288:JbtAA30Ae3D5eN4i8X0RfGnoIAZ1eSBBAbViavOJlqH:JZAA30Ae3D5eNxRf1Z8riavOXqH
Malware Config
Signatures
Files
-
de8bd9f9c36caad6a1ae6ea98ef597d72d11835c5090d495b12609ca2757241b.dll windows x86
9763efbe0532e2c22c76f62a53284fc4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptEnumProvidersW
CryptGetKeyParam
EncryptFileW
LookupPrivilegeDisplayNameA
LsaICLookupNames
ObjectCloseAuditAlarmW
QueryServiceLockStatusA
RegSaveKeyW
OpenBackupEventLogW
SetEntriesInAuditListA
GetSecurityDescriptorControl
OpenProcessToken
OpenThreadToken
RegCloseKey
BuildTrusteeWithNameA
CryptDestroyKey
ConvertAccessToSecurityDescriptorA
LsaCreateSecret
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegSetValueExA
gdi32
CombineRgn
CreateRectRgn
CreateSolidBrush
EnumMetaFile
ExtSelectClipRgn
GdiStartPageEMF
GetTextExtentPoint32A
GetWinMetaFileBits
OffsetViewportOrgEx
Polyline
CopyEnhMetaFileA
EnumFontsA
GetDeviceCaps
GdiGetDC
CreateDIBPatternBrush
SetLayout
kernel32
VirtualAlloc
CommConfigDialogW
EnumDateFormatsW
FlushInstructionCache
GetCurrentProcess
GetDiskFreeSpaceExA
GetFileAttributesW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetVolumeNameForVolumeMountPointA
GetWindowsDirectoryW
InterlockedIncrement
LoadLibraryW
MoveFileWithProgressW
ReadConsoleOutputA
RequestWakeupLatency
SetFilePointerEx
SetMailslotInfo
_lread
lstrlenW
GlobalHandle
GlobalSize
SetUnhandledExceptionFilter
TerminateProcess
CloseHandle
CompareFileTime
CreateDirectoryA
CreateEventA
CreateThread
DosDateTimeToFileTime
ExpandEnvironmentStringsA
FindFirstFileW
FreeLibraryAndExitThread
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesExA
GetLocalTime
GetVersionExA
InterlockedDecrement
IsBadReadPtr
IsBadWritePtr
LoadLibraryExA
ResetEvent
SetEvent
TlsGetValue
TlsSetValue
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
GetTickCount
InterlockedExchange
LocalAlloc
LocalFree
SetVolumeLabelW
Sleep
VirtualFree
InterlockedCompareExchange
ReadConsoleW
AddConsoleAliasA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
DisableThreadLibraryCalls
ExpandEnvironmentStringsW
FreeLibrary
GetFullPathNameA
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
GetCurrentDirectoryA
GetDriveTypeA
GetCPInfo
GetACP
GetOEMCP
GetLastError
HeapCompact
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
GetFileType
CreatePipe
CreateFileA
FindNextFileW
HeapFree
HeapAlloc
MoveFileA
SetFilePointer
UnhandledExceptionFilter
GetCommandLineA
GetVersion
ExitProcess
DeleteCriticalSection
FatalAppExitA
DeleteFileW
GetModuleHandleA
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapReAlloc
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
RtlUnwind
SetHandleCount
GetStdHandle
GetStartupInfoA
SetEndOfFile
ReadFile
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
TlsAlloc
TlsFree
SetLastError
RaiseException
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
GetTimeZoneInformation
FlushFileBuffers
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
oleaut32
DispCallFunc
DosDateTimeToVariantTime
SafeArrayAllocDescriptor
SetErrorInfo
VarI1FromUI1
VarI2FromStr
VarR4FromBool
VarR4FromUI2
VarUI2FromUI4
OleSavePictureFile
VarCyCmpR8
VarBstrFromDate
rpcrt4
NdrComplexArrayMemorySize
NdrFullPointerXlatInit
NdrProxyGetBuffer
NdrAsyncClientCall
NdrClientCall2
NdrCorrelationFree
RpcAsyncCancelCall
RpcAsyncCompleteCall
RpcAsyncInitializeHandle
RpcBindingFree
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoExA
RpcSmDestroyClientContext
RpcSsFree
RpcStringBindingComposeA
RpcStringFreeA
Exports
Exports
Sections
.text Size: 432KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ