Static task
static1
Behavioral task
behavioral1
Sample
7151d3f51b1e13859c6ae3f6984633f0182eaba35d3f92da3121ee900324619e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7151d3f51b1e13859c6ae3f6984633f0182eaba35d3f92da3121ee900324619e.dll
Resource
win10v2004-20220901-en
General
-
Target
7151d3f51b1e13859c6ae3f6984633f0182eaba35d3f92da3121ee900324619e
-
Size
15KB
-
MD5
a0bd9b4043625071de9b08ebc92d73f0
-
SHA1
7e6c0326808d053b7b4bf64cb7b31aa9d7b5c552
-
SHA256
7151d3f51b1e13859c6ae3f6984633f0182eaba35d3f92da3121ee900324619e
-
SHA512
696e3bdc50081d9cf8c6e834b269751c0964db2cb1c7a841f3e8bc8859f2b316286c197be5481f761b34d03de08c8ae4e0dd916809a8c9f97e3056214672cc6d
-
SSDEEP
192:keMUUe4Ng2W7Nd/q05lkZ8WzsAWOmP0vgl+v9bdeaCBrqN:7Ue4Ngpp1kZCAWO+0vgl+v9bE
Malware Config
Signatures
Files
-
7151d3f51b1e13859c6ae3f6984633f0182eaba35d3f92da3121ee900324619e.dll windows x86
0395177504b6d3a51d3f98e1c012cb33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
atoi
??3@YAXPAX@Z
??2@YAPAXI@Z
strrchr
strstr
shlwapi
SHDeleteKeyA
kernel32
GetFileSize
Process32First
ReadFile
lstrcatA
lstrcmpiA
Process32Next
CreateFileA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
GetWindowsDirectoryA
WriteFile
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalFree
LoadLibraryExA
GetModuleFileNameA
LocalFree
CreateThread
Sleep
WinExec
user32
OpenWindowStationA
OpenDesktopA
wsprintfA
SetProcessWindowStation
SetThreadDesktop
advapi32
RegCloseKey
BuildExplicitAccessWithNameA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
SetNamedSecurityInfoA
SetEntriesInAclA
CreateServiceA
OpenSCManagerA
OpenProcessToken
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ