Static task
static1
Behavioral task
behavioral1
Sample
bc0156c6521b5fe8e1709e85c1edfe5cecd055b93291fe398e59d083f21536c6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bc0156c6521b5fe8e1709e85c1edfe5cecd055b93291fe398e59d083f21536c6.dll
Resource
win10v2004-20220901-en
General
-
Target
bc0156c6521b5fe8e1709e85c1edfe5cecd055b93291fe398e59d083f21536c6
-
Size
21KB
-
MD5
92322f70d4cf53efff4df90819438301
-
SHA1
401cfa39070c0ee78035e77736178164e3c85c12
-
SHA256
bc0156c6521b5fe8e1709e85c1edfe5cecd055b93291fe398e59d083f21536c6
-
SHA512
c57ae2ce1b39955b66b0013aae2be28003f23bb16bbf2a9ac86eb173087411b76e5da748d190d41fdb8bd8cd52d2e64572fbb6046845863dba69a67a872b9dc7
-
SSDEEP
384:kwTIsXM31x1Bq+frr3FrHuD2lFNorkq9WNEMH:kwTt2x17jr1rOD2SQFK
Malware Config
Signatures
Files
-
bc0156c6521b5fe8e1709e85c1edfe5cecd055b93291fe398e59d083f21536c6.dll windows x86
4e16fcb7c936c4c92a8f2ef97c54f219
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord537
ord2818
ord941
ord389
ord5207
ord5356
ord540
ord825
ord2915
ord800
ord1988
ord690
ord823
msvcrt
strstr
__CxxFrameHandler
strtol
memset
time
clock
strcat
strcpy
strlen
srand
rand
malloc
free
atol
sprintf
kernel32
DeleteFileA
Sleep
GetSystemDirectoryA
DeviceIoControl
GetPrivateProfileStringA
CloseHandle
CreateThread
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
FreeLibraryAndExitThread
WriteFile
CreateProcessA
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrlenA
GetPrivateProfileIntA
ReadFile
user32
GetWindowTextA
EnumWindows
advapi32
RegOpenKeyA
StartServiceA
CreateServiceA
OpenSCManagerA
CloseServiceHandle
shell32
SHGetFolderPathA
ShellExecuteA
wininet
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ