Static task
static1
Behavioral task
behavioral1
Sample
c972dde0a971dbb742fab22bc7a9bbf273a7341087de130444bb94e0464328eb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c972dde0a971dbb742fab22bc7a9bbf273a7341087de130444bb94e0464328eb.dll
Resource
win10v2004-20220812-en
General
-
Target
c972dde0a971dbb742fab22bc7a9bbf273a7341087de130444bb94e0464328eb
-
Size
24KB
-
MD5
73257fc9d97c8e5d8fd914f8db787770
-
SHA1
636c0dd280b711a4d495008ef67a80e37174a998
-
SHA256
c972dde0a971dbb742fab22bc7a9bbf273a7341087de130444bb94e0464328eb
-
SHA512
660a06e0241dae398b6f125a4e1b45e553900bfb806ce5b2f3db892b39688a2ebf3b4354c2d5c18e736cf1de284ca379859a5a67b258e9b0df662ae610b59acf
-
SSDEEP
384:PtRwQ3Rd/GlmcM56SYyDyC8uc+afOiH2X2MllbwbaldaUk:VRNoYEyDyCI+3islMbUo
Malware Config
Signatures
Files
-
c972dde0a971dbb742fab22bc7a9bbf273a7341087de130444bb94e0464328eb.dll windows x86
bedfb3f34c8cdb0f1912c896d7bb2b36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
RaiseException
CloseHandle
GetCurrentThread
Process32Next
Process32First
CreateToolhelp32Snapshot
InitializeCriticalSection
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
ReadProcessMemory
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleFileNameA
WriteProcessMemory
VirtualProtectEx
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
GetProcAddress
CreateThread
GetCurrentProcessId
OpenMutexA
CreateMutexA
GetTickCount
Sleep
SetThreadContext
user32
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetKeyState
GetWindowThreadProcessId
FindWindowA
msvcrt
fread
_stricmp
_adjust_fdiv
malloc
_initterm
free
strrchr
rand
srand
strcat
sprintf
strcpy
strlen
memcpy
strcmp
strncpy
??2@YAPAXI@Z
??3@YAXPAX@Z
sscanf
strstr
fclose
_strlwr
fopen
memset
wcslen
wininet
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdata Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ