CreateObj
Static task
static1
Behavioral task
behavioral1
Sample
aa75d2910261179ab9e5ad12fb9de1f146c5247630e1c38853a8b56da6e44856.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa75d2910261179ab9e5ad12fb9de1f146c5247630e1c38853a8b56da6e44856.dll
Resource
win10v2004-20220901-en
General
-
Target
aa75d2910261179ab9e5ad12fb9de1f146c5247630e1c38853a8b56da6e44856
-
Size
292KB
-
MD5
01a4e6be797e06ea5f3a1f53cdaba200
-
SHA1
9d4d3d452a52fe2dde2ecaa9ad7bc56e5f5fb6e3
-
SHA256
aa75d2910261179ab9e5ad12fb9de1f146c5247630e1c38853a8b56da6e44856
-
SHA512
0ebdc0ee5a397c661994df7705f7e8b7311c34f4e0930576e88265dd7a452a39e68bccabfdcd9172a5421214038220b3e8c4c12841d7b44b1e5df475a4985973
-
SSDEEP
6144:yGzTw8ZWriO61bQgSB0LSSR0WFEfoND3GwdTG5oxWdAaAlVi3vc:ywTw8ZWribNpLB0WFEf+awdqmxotOo/c
Malware Config
Signatures
Files
-
aa75d2910261179ab9e5ad12fb9de1f146c5247630e1c38853a8b56da6e44856.dll windows x86
bbd724ed5014199e79cea9e648a5c9b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
CreateToolhelp32Snapshot
Thread32First
Thread32Next
OpenThread
SuspendThread
SetThreadContext
ResumeThread
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileMappingA
RtlMoveMemory
OpenProcess
VirtualFreeEx
VirtualAllocEx
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTickCount
LCMapStringA
user32
wsprintfA
MessageBoxA
GetWindowThreadProcessId
GetClassNameA
GetWindowTextA
EnumThreadWindows
FindWindowA
msvcrt
_ftol
__CxxFrameHandler
malloc
free
memmove
modf
strchr
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
_strnicmp
srand
rand
_CIfmod
strncmp
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 232KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ