Static task
static1
Behavioral task
behavioral1
Sample
dc9b5e8aa6ec86db8af0a7aa897ca61db3e5f3d2e0942e319074db1aaccfdc83.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc9b5e8aa6ec86db8af0a7aa897ca61db3e5f3d2e0942e319074db1aaccfdc83.dll
Resource
win10v2004-20220812-en
General
-
Target
dc9b5e8aa6ec86db8af0a7aa897ca61db3e5f3d2e0942e319074db1aaccfdc83
-
Size
171KB
-
MD5
748aa5fcfa2af451c76039faf6a8684d
-
SHA1
e7cca2da5161a313161a81a38a8b5773310a6801
-
SHA256
dc9b5e8aa6ec86db8af0a7aa897ca61db3e5f3d2e0942e319074db1aaccfdc83
-
SHA512
625f125513dc94704a67aa182e5787c57e2d716c3f55155d91e0e1314246c2652dd74b4893708cbad55d8c75ac1e812c4c2a31e0a5f1f4f335bd7353870373a9
-
SSDEEP
3072:tG564mBLMkgd8YHHbtsVQYIdSqkwJZ+rxVS4a0Z+U7Bz8B31jD/COsfKbfjqZ/Pe:tpBLMk222YI9qyL0RBz8d1PKOs+feZXZ
Malware Config
Signatures
Files
-
dc9b5e8aa6ec86db8af0a7aa897ca61db3e5f3d2e0942e319074db1aaccfdc83.dll windows x86
80222297a6a21eb26523c108a57d7cd4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
LocalFree
GetTickCount
GetCurrentProcess
GetProcAddress
lstrcatA
WriteFile
GetSystemDirectoryA
CreateFileA
GetFileTime
CloseHandle
SetFileTime
Sleep
LoadLibraryA
advapi32
UnlockServiceDatabase
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
LockServiceDatabase
ChangeServiceConfigA
ControlService
StartServiceA
QueryServiceStatus
msvcrt
memcpy
rand
srand
calloc
free
strcat
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ