f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31 | Triage

Submit
Reports

Overview

overview

Static

static

f31fba553a...31.dll

windows7-x64

f31fba553a...31.dll

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31.dll

Resource

win7-20220812-en

ramnit banker spyware stealer trojan upx worm

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31.dll

Resource

win10v2004-20220812-en

ramnit banker spyware stealer trojan upx worm

windows10-2004-x64

12 signatures

150 seconds

General

Target

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31
Size

1.2MB
MD5

1e931236accf75ba61e0f52b04723b50
SHA1

90518ffceaa11d0f45f1a428e34d44178fe74d73
SHA256

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31
SHA512

3a4fc271c9f58cd32f1eee0229a7a0541f4fcd720f48bab8151007c914345eb4a47b29bc07d5b10aed89ea4114f3b90361a60216cf81c6755754deafb843a85f
SSDEEP

24576:QNeoNus5zvYhUB8bLZY3ssGXYpQ7kWlpih9kk4dx298qdvVTcVwdyLPHBELSlKms:aeoNDyV/L5ELSlSA4n6WEMk

Score

N/A

Malware Config

Signatures

Files

f31fba553a54dd38c0e347efb83c66d859adf717566ed0e2965b5d5838aedb31
.dll windows x86

2182f348393feaaad42ea59146a9f78a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
QueryPerformanceCounter
LocalAlloc
GetEnvironmentVariableA
GetLastError
RaiseException
GetModuleHandleA
GetModuleFileNameA
LocalFree
LoadLibraryA
FreeLibrary
GetProcAddress
InterlockedExchange

user32

wsprintfA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

msvcrt

fclose
qsort
fprintf
fseek
fwrite
fread
_iob
printf
fscanf
fflush
vfprintf
exit
fputs
_errno
malloc
free
strrchr
_control87
fopen
memset

Exports

Exports

ResetSbrHeaders
aacStreamClose32
aacStreamDestroy32
aacStreamEncodeFrame32
aacStreamOpen32
aacStreamOpenEx

Sections

.text
Size: 700KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 904KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

© 2018-2024

Terms | Privacy