Static task
static1
Behavioral task
behavioral1
Sample
b503eeef4228bb3e0b8df4ca56786cf11e227b4ccb73d7a2986bac0d68e9ab7c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b503eeef4228bb3e0b8df4ca56786cf11e227b4ccb73d7a2986bac0d68e9ab7c.dll
Resource
win10v2004-20220901-en
General
-
Target
b503eeef4228bb3e0b8df4ca56786cf11e227b4ccb73d7a2986bac0d68e9ab7c
-
Size
32KB
-
MD5
751ffbffe304750ba5802426b82a91a5
-
SHA1
89b9c6c17ffc4555121f7d12a832a6fdd10936a6
-
SHA256
b503eeef4228bb3e0b8df4ca56786cf11e227b4ccb73d7a2986bac0d68e9ab7c
-
SHA512
d9e17a1930f60a6a8002fd10c70c607029a74819b70e131eb0f4d1e82c9c796a7f233b87deeab1b3f8677a04f7d736100b1ef800762fd790325b7d61c2b69b60
-
SSDEEP
768:hSGclQQb87feQ1X4FPlRCvZTkiw1UixPW:hzc27feQ1X4TQvOikM
Malware Config
Signatures
Files
-
b503eeef4228bb3e0b8df4ca56786cf11e227b4ccb73d7a2986bac0d68e9ab7c.dll windows x86
c009200719968f3979f8c18d7616b2eb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
GetProcAddress
LoadLibraryA
CloseHandle
GetTempPathA
CreateFileA
CreateThread
CopyFileA
GetTickCount
GetModuleFileNameA
Sleep
WriteFile
DeleteFileA
user32
SetWinEventHook
UnhookWinEvent
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteKeyA
msvcrt
??3@YAXPAX@Z
calloc
rename
rand
sprintf
srand
printf
free
??2@YAPAXI@Z
strstr
_except_handler3
shlwapi
PathFileExistsA
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ