usrapicdrom
Static task
static1
Behavioral task
behavioral1
Sample
680d51449d889eada9859964dfd911c2f6a226c61b0e779b004e29c628cbb0be.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
680d51449d889eada9859964dfd911c2f6a226c61b0e779b004e29c628cbb0be.dll
Resource
win10v2004-20220812-en
General
-
Target
680d51449d889eada9859964dfd911c2f6a226c61b0e779b004e29c628cbb0be
-
Size
84KB
-
MD5
1bc13f7b7602cb2db8a64423d625cf42
-
SHA1
e993377f9ea830f5bfa256d9b8f74638039ffdd6
-
SHA256
680d51449d889eada9859964dfd911c2f6a226c61b0e779b004e29c628cbb0be
-
SHA512
9b817688be983ef1a6388c3799d406ed6188e8210db57d4eb77be872c7d8588b0dfc0fddfb3cd45ed80e887c2e5e9a866f2fdcc6790f86d746b3463e23d24178
-
SSDEEP
1536:EU9Bk9/RDNNNoKZmAYfcs+BLE2khk+7xWpXPXZoXOnALXQo19EC:EUHm/7roSpcEE2gk2mX/KXuALXQk9
Malware Config
Signatures
Files
-
680d51449d889eada9859964dfd911c2f6a226c61b0e779b004e29c628cbb0be.dll windows x86
679ac43c1893c7230258c2dfd0828d83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ReleaseMutex
CreateDirectoryA
CloseHandle
GetModuleFileNameA
CreateFileMappingA
GetSystemDirectoryA
InterlockedDecrement
UnmapViewOfFile
lstrlenA
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetProcessHeap
WriteFile
GetProcAddress
SetLastError
GetVolumeInformationA
GetLastError
GetTickCount
DisconnectNamedPipe
SetFileApisToOEM
LoadResource
VirtualFree
GetTimeFormatA
VerifyVersionInfoA
SetHandleInformation
SetCommBreak
GetDateFormatW
GetLongPathNameW
WriteProfileStringA
GetProfileSectionA
GetThreadPriority
GetBinaryTypeW
lstrcmpiW
GlobalAddAtomW
FindVolumeClose
GetSystemInfo
CreateThread
BackupWrite
VirtualUnlock
AreFileApisANSI
FindResourceExA
SetCommTimeouts
MoveFileW
SetConsoleWindowInfo
VerifyVersionInfoW
FillConsoleOutputCharacterW
ExpandEnvironmentStringsA
RemoveDirectoryA
OpenSemaphoreA
TerminateThread
GlobalFindAtomW
GetFileSize
GetTimeZoneInformation
SetEnvironmentVariableA
oleaut32
SysStringByteLen
SysFreeString
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ