WriteIkfqwrsr
Static task
static1
Behavioral task
behavioral1
Sample
6f79a156e4072e7d8ff4c31141821cedf0b2ef40a26ca1f3b1b771cfdc4a43f6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f79a156e4072e7d8ff4c31141821cedf0b2ef40a26ca1f3b1b771cfdc4a43f6.dll
Resource
win10v2004-20220901-en
General
-
Target
6f79a156e4072e7d8ff4c31141821cedf0b2ef40a26ca1f3b1b771cfdc4a43f6
-
Size
30KB
-
MD5
58da036d4d0d14ab328aa0aa8fe704aa
-
SHA1
c21269830a36f8ba0f3241453d175042502e5027
-
SHA256
6f79a156e4072e7d8ff4c31141821cedf0b2ef40a26ca1f3b1b771cfdc4a43f6
-
SHA512
66968fb40cbece6d3de090f2c41d4acd5a424046cfe9cfa6deb840fa84b98ebb8a2e5d85624cefeb71490f665b836b47923d5f37737ef702e740ad5a3ce7686f
-
SSDEEP
768:UdNqDj2i/HfSBTAHcMKxuaj4b66rzK/El2+d5IboL:2QH2i/HfUs8M2ux6B67a
Malware Config
Signatures
Files
-
6f79a156e4072e7d8ff4c31141821cedf0b2ef40a26ca1f3b1b771cfdc4a43f6.dll windows x86
e9a278880d5ebb9b6e4e39aed351a907
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetCurrentProcess
ReadProcessMemory
DeleteTimerQueueTimer
FindFirstVolumeMountPointA
AllocateUserPhysicalPages
SystemTimeToTzSpecificLocalTime
GetCommandLineA
ExitProcess
GetStartupInfoA
Exports
Exports
Sections
.rc5sec0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rc5sec1 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc5sec2 Size: 22KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc5sec3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ