_kHchIycwu
Static task
static1
Behavioral task
behavioral1
Sample
958b183ebd93ef47e59549fb61894eb844209df3aa1e61c0a3a1068cf8714ad9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
958b183ebd93ef47e59549fb61894eb844209df3aa1e61c0a3a1068cf8714ad9.dll
Resource
win10v2004-20220812-en
General
-
Target
958b183ebd93ef47e59549fb61894eb844209df3aa1e61c0a3a1068cf8714ad9
-
Size
208KB
-
MD5
7c5704e499e21cace895645f37b33da0
-
SHA1
ce404bdb212912a419e86d5e29b608a9651c670a
-
SHA256
958b183ebd93ef47e59549fb61894eb844209df3aa1e61c0a3a1068cf8714ad9
-
SHA512
e7f68a9d14d954e66b5757aa2d4bc3d0aa91dc50420f0bd7910cf914145757a88b1d371a3ce1bb600774d3d89209fb6ba825cf672af13d291367a69dc2210d16
-
SSDEEP
6144:Oto+F9zdyn1Hp+sKdLgFXm4WKzAO7Q9W7LrKl:0FWneLYmqzAo6CL2l
Malware Config
Signatures
Files
-
958b183ebd93ef47e59549fb61894eb844209df3aa1e61c0a3a1068cf8714ad9.dll windows x86
17d9e01e75c04c4f8f569994652e81ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedCompareExchange
lstrcpyA
GetFileType
FlushFileBuffers
GetDiskFreeSpaceA
GetTempPathA
UnhandledExceptionFilter
CreateFileMappingA
GlobalLock
FreeEnvironmentStringsA
SizeofResource
CreateDirectoryA
HeapFree
GetProcAddress
LoadResource
CreateFileA
SetStdHandle
ExitProcess
GetCurrentProcess
GetSystemDirectoryA
GetPrivateProfileStringA
GlobalUnlock
GetACP
GetModuleFileNameA
TerminateProcess
LoadLibraryA
GetLastError
WaitForSingleObject
lstrcmpiA
MultiByteToWideChar
GlobalAlloc
LocalAlloc
InterlockedExchange
FreeLibrary
LocalFree
RaiseException
shell32
SHBrowseForFolderA
SHGetMalloc
powrprof
WriteGlobalPwrPolicy
GetActivePwrScheme
SetActivePwrScheme
ReadGlobalPwrPolicy
Exports
Exports
Sections
.text Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 824B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ