_main@4
Static task
static1
Behavioral task
behavioral1
Sample
8117bd716932b890900581c6c03b99ca75c7dc6cfd983cc8c4d1becc9a43ec86.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8117bd716932b890900581c6c03b99ca75c7dc6cfd983cc8c4d1becc9a43ec86.dll
Resource
win10v2004-20220812-en
General
-
Target
8117bd716932b890900581c6c03b99ca75c7dc6cfd983cc8c4d1becc9a43ec86
-
Size
17KB
-
MD5
69e68f93de364011b0084c0ea6b43aa1
-
SHA1
72f5fe642c97fc739fae7ffc1a1da21f1d4500f7
-
SHA256
8117bd716932b890900581c6c03b99ca75c7dc6cfd983cc8c4d1becc9a43ec86
-
SHA512
c421be79705f8ca794fd0b7fbfc7a1ea87a70a420586698e2c5d4ff5f30f6a269ecd2cc6d2c1183d21a1d4ce0b56314701fc6f7230f34c002bf0071fb4188071
-
SSDEEP
384:cwxI2ZQ7o4hIIf3dsoUAzfIquXCTzyhFz/nFIFLIlQae+/34e9GUg:cwxI294hHf3dZUAzgXC8FznFeIlo+P4z
Malware Config
Signatures
Files
-
8117bd716932b890900581c6c03b99ca75c7dc6cfd983cc8c4d1becc9a43ec86.dll windows x86
cd9c57538e51c718ba7f1b87a59e8e98
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
OpenEventA
CreateEventA
SetEvent
InterlockedExchange
CancelIo
ResetEvent
InitializeCriticalSection
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
lstrcatA
GetWindowsDirectoryA
lstrcpyA
TerminateThread
CreateProcessA
DeleteFileA
GetLastError
CloseHandle
GetFileAttributesA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
LocalReAlloc
FindFirstFileA
LocalAlloc
RemoveDirectoryA
GetFileSize
CreateFileA
ReadFile
SetFilePointer
GetTickCount
WaitForSingleObject
CreateDirectoryA
ReleaseMutex
user32
CharNextA
wsprintfA
advapi32
RegQueryValueA
RegOpenKeyExA
RegCloseKey
shell32
SHGetFileInfoA
msvcrt
??0exception@@QAE@ABQBD@Z
??1type_info@@UAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
??3@YAXPAX@Z
memmove
ceil
_ftol
strstr
_beginthreadex
strrchr
fclose
fwrite
fopen
free
malloc
_except_handler3
??2@YAPAXI@Z
__dllonexit
_onexit
_initterm
_adjust_fdiv
strlen
??0exception@@QAE@ABV0@@Z
ws2_32
gethostbyname
socket
recv
htons
send
WSACleanup
WSAStartup
connect
WSAIoctl
setsockopt
select
closesocket
Exports
Exports
Sections
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ