usbnetTime
Static task
static1
Behavioral task
behavioral1
Sample
65f0c5319b0b5bfd0bd71e59a46f0d81efb37054d1b5806d9231877e34bbbc98.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
65f0c5319b0b5bfd0bd71e59a46f0d81efb37054d1b5806d9231877e34bbbc98.dll
Resource
win10v2004-20220901-en
General
-
Target
65f0c5319b0b5bfd0bd71e59a46f0d81efb37054d1b5806d9231877e34bbbc98
-
Size
124KB
-
MD5
6b68e187c5a22b8cedabb719114af2bb
-
SHA1
035bdaf9617338d38035a109afbfd2ededc59d30
-
SHA256
65f0c5319b0b5bfd0bd71e59a46f0d81efb37054d1b5806d9231877e34bbbc98
-
SHA512
ba7a5be737e59dfc4114c498338fa9597ea79357100465e55f4a8d67a31b8624629c3065d0a0fd48b88c1bec8f2c7e4a87d4e73200986004f788053f39c4ef8f
-
SSDEEP
3072:zcIKa93/27Rp+qEO0mpBJwsRN+TRLEStVo5MOklmgaM:4mNOTpE3mD8RLEy4Mbm+
Malware Config
Signatures
Files
-
65f0c5319b0b5bfd0bd71e59a46f0d81efb37054d1b5806d9231877e34bbbc98.dll windows x86
ce023ca28644199d9780d7776b5ddda7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
InterlockedDecrement
GetProcAddress
GetLastError
CreateEventA
GetTickCount
WaitForSingleObject
InterlockedCompareExchange
UnmapViewOfFile
GetCommandLineA
EnterCriticalSection
CopyFileA
InterlockedIncrement
OpenEventA
SetLastError
CloseHandle
GetModuleFileNameA
MapViewOfFile
lstrlenA
LoadLibraryA
CreateDirectoryA
LocalFree
ReleaseMutex
lstrlenW
Sleep
LeaveCriticalSection
GetModuleHandleA
ExitProcess
ole32
OleSetContainedObject
CoInitialize
CoCreateGuid
CreateBindCtx
CoUninitialize
OleCreate
user32
SetTimer
SendMessageA
CreateWindowExA
GetClassNameA
GetSystemMetrics
SetWindowLongA
KillTimer
GetParent
GetMessageA
DefWindowProcA
PostMessageA
DestroyWindow
FindWindowA
PostQuitMessage
DispatchMessageA
RegisterWindowMessageA
GetWindowLongA
TranslateMessage
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
shlwapi
StrStrIW
UrlUnescapeW
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
Exports
Exports
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ