FF
Static task
static1
Behavioral task
behavioral1
Sample
0258e05ff628eeeaaee927967eacbcd2194557c2e4fd461d9534978d082e558c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0258e05ff628eeeaaee927967eacbcd2194557c2e4fd461d9534978d082e558c.dll
Resource
win10v2004-20220812-en
General
-
Target
0258e05ff628eeeaaee927967eacbcd2194557c2e4fd461d9534978d082e558c
-
Size
70KB
-
MD5
a045981c8f3f90c984fe1b0c9e401050
-
SHA1
ce21ffeef461867f396907e5b0bb614e70f02c66
-
SHA256
0258e05ff628eeeaaee927967eacbcd2194557c2e4fd461d9534978d082e558c
-
SHA512
a4650e479d830249910f890fcfcbaa547944c09481806f6523b73b4b2295f45aebb69da702a184bfd8178539fd2b3a7743dcf32437c1bda5186659189246922d
-
SSDEEP
768:pGtKZSaBCdRligTgb83xh3E9WmakqujJAW5jinqqw2f34fevZNq0litzYS7++McG:cj7Tgb8hW9W/kRjJAW5+lf34uf
Malware Config
Signatures
Files
-
0258e05ff628eeeaaee927967eacbcd2194557c2e4fd461d9534978d082e558c.dll windows x86
fb03b8ed9aadebb182931cf9c425243c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
DeleteFileA
lstrcatA
WinExec
GetLastError
FreeResource
WriteFile
SizeofResource
LockResource
LoadResource
FindResourceA
CreateFileA
ExpandEnvironmentStringsA
Sleep
DeviceIoControl
UnmapViewOfFile
GetTickCount
MapViewOfFile
OutputDebugStringA
GetFileSize
CreateThread
ReadFile
WaitForSingleObject
CreateProcessA
GetStartupInfoA
CreatePipe
SetFileAttributesA
CopyFileA
GetDriveTypeA
GetLogicalDriveStringsA
ExitProcess
GetWindowsDirectoryA
GetSystemTime
TerminateThread
FindClose
FindNextFileA
FindFirstFileA
GetFileAttributesA
GetSystemDirectoryA
TerminateProcess
LoadLibraryA
GetProcAddress
OpenProcess
CreateFileMappingA
CloseHandle
user32
GetWindowLongA
FindWindowA
ShowWindow
advapi32
ControlService
CloseServiceHandle
OpenSCManagerA
StartServiceA
CreateServiceA
DeleteService
OpenServiceA
ws2_32
inet_addr
htons
inet_ntoa
gethostbyname
gethostname
WSAStartup
connect
send
closesocket
socket
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
msvcp60
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
?is_open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?eof@ios_base@std@@QBE_NXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
msvcrt
_except_handler3
_adjust_fdiv
_initterm
_onexit
__dllonexit
printf
??2@YAPAXI@Z
strncpy
fputc
_stricmp
atoi
fwrite
fread
fseek
ftell
sprintf
strchr
fclose
fopen
free
malloc
mpr
WNetAddConnection2A
rpcrt4
I_RpcGetBuffer
NdrConformantArrayBufferSize
NdrAllocate
NdrConformantStringUnmarshall
NdrPointerUnmarshall
NdrConvert
NdrFreeBuffer
NdrNsSendReceive
NdrNsGetBuffer
NdrClientInitializeNew
NdrConformantArrayUnmarshall
NdrConformantStringMarshall
NdrPointerMarshall
NdrConformantStringBufferSize
NdrPointerBufferSize
NdrConformantArrayMarshall
NdrServerInitializeNew
RpcRaiseException
RpcBindingFree
RpcStringFreeA
RpcBindingFromStringBindingA
RpcStringBindingComposeA
Exports
Exports
Sections
.data Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ