_main@4
Static task
static1
Behavioral task
behavioral1
Sample
83e36b0f95f5f24949d017f85074a6377f48608f577c2fddeb9d428e526e6605.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
83e36b0f95f5f24949d017f85074a6377f48608f577c2fddeb9d428e526e6605.dll
Resource
win10v2004-20220901-en
General
-
Target
83e36b0f95f5f24949d017f85074a6377f48608f577c2fddeb9d428e526e6605
-
Size
16KB
-
MD5
03636d30effbae299db8aeed6e0c80a3
-
SHA1
f173c27d2e9c8208265e78e018753913a5ec5936
-
SHA256
83e36b0f95f5f24949d017f85074a6377f48608f577c2fddeb9d428e526e6605
-
SHA512
3302757e90b0cb71566df5cd1d16d6d305ab81486992598f45b1fd04e48c5a75cf341803af21128eee54ddce232abc67ebd01dd5ca066e6206451611c5af204a
-
SSDEEP
384:xQzoFIgV9hWhxZ7rkwz6zXQHS83WmxqJRZOS2K5Ze+/4n9Yac:xQkIAWhX7rZz6z6SmgJrOS2K5k+/42
Malware Config
Signatures
Files
-
83e36b0f95f5f24949d017f85074a6377f48608f577c2fddeb9d428e526e6605.dll windows x86
95d9f7a8e1a13f9b46148d1a99c40033
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
OpenEventA
CreateEventA
SetEvent
InterlockedExchange
CancelIo
ResetEvent
InitializeCriticalSection
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
lstrcatA
GetWindowsDirectoryA
lstrcpyA
TerminateThread
CreateProcessA
DeleteFileA
CloseHandle
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
LocalReAlloc
FindFirstFileA
LocalAlloc
RemoveDirectoryA
GetFileSize
CreateFileA
GetTickCount
WaitForSingleObject
ReleaseMutex
user32
wsprintfA
advapi32
RegQueryValueA
RegOpenKeyExA
RegCloseKey
shell32
SHGetFileInfoA
msvcrt
??0exception@@QAE@ABQBD@Z
??1type_info@@UAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
??3@YAXPAX@Z
memmove
ceil
_ftol
strstr
_beginthreadex
strrchr
fclose
fwrite
fopen
free
malloc
??2@YAPAXI@Z
__dllonexit
_onexit
_initterm
_adjust_fdiv
strlen
??0exception@@QAE@ABV0@@Z
ws2_32
gethostbyname
socket
recv
htons
send
WSACleanup
WSAStartup
connect
WSAIoctl
setsockopt
select
closesocket
Exports
Exports
Sections
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ