Static task
static1
Behavioral task
behavioral1
Sample
a668d055d3b83a70ae56ca82d146323d83642d8785ceeb363eb86bcdd3485845.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a668d055d3b83a70ae56ca82d146323d83642d8785ceeb363eb86bcdd3485845.dll
Resource
win10v2004-20220901-en
General
-
Target
a668d055d3b83a70ae56ca82d146323d83642d8785ceeb363eb86bcdd3485845
-
Size
88KB
-
MD5
9172b2f84bcbd7c5f57f328a97d2cb55
-
SHA1
73bb9087ca0cd4bf0879a9242bd44e4bf1f6546c
-
SHA256
a668d055d3b83a70ae56ca82d146323d83642d8785ceeb363eb86bcdd3485845
-
SHA512
941191ec568d173745ddf4ab018ab1d7a9234c16cbf27656072b271a048cc37144b1bc2342ca427f2b31557efa03288b718fec2dd1f846420f89eb34c7107dcc
-
SSDEEP
1536:WRK29ApbF4UoB7gQE4NUp1YSQoSlYMvnfQphYtT2UggITys3XrtL1:aKGApb+UsNUp1YSQo5MPfSYtT2hLXJ
Malware Config
Signatures
Files
-
a668d055d3b83a70ae56ca82d146323d83642d8785ceeb363eb86bcdd3485845.dll windows x86
343b6c4fbb378636f1300ba7696a3d6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileA
SetUnhandledExceptionFilter
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
GetCurrentDirectoryA
LocalFree
FreeLibrary
GetWindowsDirectoryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
GetCommandLineA
CreateFileA
CloseHandle
GetPrivateProfileIntA
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcmpiA
CreateDirectoryA
GetSystemInfo
GetVersionExA
GetProcessHeap
MultiByteToWideChar
VirtualProtect
FormatMessageA
HeapAlloc
HeapFree
RtlUnwind
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeW
user32
CharNextA
LoadStringA
MessageBoxExA
wsprintfA
CharPrevA
advapi32
SetNamedSecurityInfoA
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
InitializeSid
GetSidLengthRequired
RegQueryValueExA
RegEnumValueA
GetSecurityDescriptorDacl
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ