pfjieaoidjglkajd
Static task
static1
Behavioral task
behavioral1
Sample
5ca8970042c7e6c30f07c61dde824e93b2c5cd4fe65a242c67b5cc45ea2a0918.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ca8970042c7e6c30f07c61dde824e93b2c5cd4fe65a242c67b5cc45ea2a0918.dll
Resource
win10v2004-20220901-en
General
-
Target
5ca8970042c7e6c30f07c61dde824e93b2c5cd4fe65a242c67b5cc45ea2a0918
-
Size
107KB
-
MD5
6a9c176787ddaf775928c952bdbcc995
-
SHA1
d79c39e19bea9cfc75670d3e8b097a70f7a0a2ca
-
SHA256
5ca8970042c7e6c30f07c61dde824e93b2c5cd4fe65a242c67b5cc45ea2a0918
-
SHA512
a92a152d6d729c9137c1b096615742c37fa2b3a5593c75e3117c860d5bd4b2ea2775d89fc51f9504445b5f13f633d5b83cf4b578f22a4cd1e79f9a2b79a411a3
-
SSDEEP
1536:dBb2vMa1iQdXKKI6jSRH1mqwmieIGy5oHomf9d3yv+0IesB3oIHn1w8Yo:vb2vMOibZJB+Gy5oHRVdg1439Hny8Y
Malware Config
Signatures
Files
-
5ca8970042c7e6c30f07c61dde824e93b2c5cd4fe65a242c67b5cc45ea2a0918.dll windows x86
b2d74ec4fda55ae555f4128733d301ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
SetFilePointer
SetFileTime
GetFileTime
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
GetFileSize
GetModuleFileNameA
GetCurrentProcessId
LocalAlloc
MultiByteToWideChar
lstrlenA
MoveFileExA
Sleep
GetWindowsDirectoryA
GetSystemDirectoryA
lstrcpyA
lstrcatA
CreateThread
GlobalAlloc
GlobalFree
SetEndOfFile
FindNextFileA
GetModuleHandleA
GetTempPathA
ReleaseMutex
GetLastError
CreateMutexA
SetFileAttributesA
GetFileAttributesA
FindClose
WriteFile
GetTickCount
CopyFileA
CreateFileA
ReadFile
CloseHandle
DeleteFileA
user32
wsprintfA
SystemParametersInfoA
GetKeyboardLayoutList
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA
msvcrt
rand
strchr
_stricmp
_except_handler3
strcat
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
memset
strcpy
atoi
srand
memcpy
strstr
_strlwr
strlen
Exports
Exports
Sections
.bss Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ