Wrch4
Static task
static1
Behavioral task
behavioral1
Sample
7347c0da160c02d91cc2928c615c36171c8eaed09a68eff416b32daf11000001.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7347c0da160c02d91cc2928c615c36171c8eaed09a68eff416b32daf11000001.dll
Resource
win10v2004-20220901-en
General
-
Target
7347c0da160c02d91cc2928c615c36171c8eaed09a68eff416b32daf11000001
-
Size
121KB
-
MD5
67eeec99ec33410c6d6cda74857f5b4f
-
SHA1
ce1d18ec285bc35200f3119941e79801d3fc3940
-
SHA256
7347c0da160c02d91cc2928c615c36171c8eaed09a68eff416b32daf11000001
-
SHA512
4309c4448f83c3990263f7e92cffaea94ae96acfe140239e06d572125a5cf2f72734e2894da2abfe7416951b369da348781d03097e8bcc205ce8b914f967e487
-
SSDEEP
3072:XPXA1cFkyhUaN/RA6Ex4c1xkCj9iEDS6AEzpZb9:XPXAqialRAp40iGxVzz
Malware Config
Signatures
Files
-
7347c0da160c02d91cc2928c615c36171c8eaed09a68eff416b32daf11000001.dll windows x86
7dcaa36823fad6afb226c5607caf18b3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsSystemResumeAutomatic
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
user32
CharNextA
MessageBoxA
wsprintfA
advapi32
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegSetValueExA
msvcrt
memset
toupper
powrprof
GetPwrCapabilities
Exports
Exports
Sections
.data Size: 512B - Virtual size: 538KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ