RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
b5f07ebfdb40675f0329df1f8bc9e595b4813ab283828ee89d658a46265baedc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5f07ebfdb40675f0329df1f8bc9e595b4813ab283828ee89d658a46265baedc.dll
Resource
win10v2004-20220812-en
General
-
Target
b5f07ebfdb40675f0329df1f8bc9e595b4813ab283828ee89d658a46265baedc
-
Size
116KB
-
MD5
6a822b28e9a0d14ea2824c49fb7af5a9
-
SHA1
36dbfcf61fd2ebb4a6e10553ea5ab9757ddc8a91
-
SHA256
b5f07ebfdb40675f0329df1f8bc9e595b4813ab283828ee89d658a46265baedc
-
SHA512
32bf117e51fd5ae413945f07cc60bf8de9fce506d8ed71cc0843d12c2d8eb632d2f0eb150ca48c2c9aa9da9025cced075fe3ea0c126501aba6ced001b00822ac
-
SSDEEP
3072:K6edPLPIL31GTm82m1BmgdZGyikHAlS9c:2Pi+1BdKyi+83
Malware Config
Signatures
Files
-
b5f07ebfdb40675f0329df1f8bc9e595b4813ab283828ee89d658a46265baedc.dll windows x86
7cd345e4a7dda2d229e66f79f59fc02d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pncrt
??2@YAPAXI@Z
_stricmp
strrchr
strncpy
_purecall
??3@YAXPAX@Z
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
malloc
realloc
_strcmpi
kernel32
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE