ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
19c549c679aea8cd16459d9ee49a43a3+b619d9c73ab5e6043c017c189e8355be85c809d0+253be293f574d9c0c13cec0e2b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
19c549c679aea8cd16459d9ee49a43a3+b619d9c73ab5e6043c017c189e8355be85c809d0+253be293f574d9c0c13cec0e2b.dll
Resource
win10v2004-20220812-en
General
-
Target
19c549c679aea8cd16459d9ee49a43a3+b619d9c73ab5e6043c017c189e8355be85c809d0+253be293f574d9c0c13cec0e2b92f99da6c98ae68fcc18b8438ea8748a9a02bc
-
Size
6.4MB
-
MD5
19c549c679aea8cd16459d9ee49a43a3
-
SHA1
b619d9c73ab5e6043c017c189e8355be85c809d0
-
SHA256
253be293f574d9c0c13cec0e2b92f99da6c98ae68fcc18b8438ea8748a9a02bc
-
SHA512
cc45b427937f9436ead6a516ff98e57f9c012afc277feef8c04fed01007cace587a18b4a74484581f94099c5ef6b018a31a1e4f2222e7fbdea505e5c23a655c9
-
SSDEEP
98304:tr66ea0wkK0l81JA3JclH+d5SGqgdAwOK3rO3JcBZZHgCxeW8iwCymNe0xz0otXY:leaUJIau+LSSOeuXuefyLzEX
Malware Config
Signatures
Files
-
19c549c679aea8cd16459d9ee49a43a3+b619d9c73ab5e6043c017c189e8355be85c809d0+253be293f574d9c0c13cec0e2b92f99da6c98ae68fcc18b8438ea8748a9a02bc.dll windows x86
0bea255d0e9f34f434ba83544fc72360
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
SetServiceStatus
shlwapi
PathRenameExtensionA
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.QAZ0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.QAZ1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.QAZ2 Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ