CleanupResourceLoader
Static task
static1
Behavioral task
behavioral1
Sample
134fd742d98f73b9a243d4578cb42b462487802f601bc9f5d942614749bde67d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
134fd742d98f73b9a243d4578cb42b462487802f601bc9f5d942614749bde67d.dll
Resource
win10v2004-20220901-en
General
-
Target
134fd742d98f73b9a243d4578cb42b462487802f601bc9f5d942614749bde67d
-
Size
95KB
-
MD5
0b73fdf385cf82e62871a1e120e90950
-
SHA1
8bf130c26b45604b536ea8cf0c2f03f953d76230
-
SHA256
134fd742d98f73b9a243d4578cb42b462487802f601bc9f5d942614749bde67d
-
SHA512
92fc2965bcdb1cfbab853d65c2d702485fe6bdedb3881eb4d365b4ec47576fed42cb683f4f4c39b915c41dc680def25b1d5e3d825ec2a3fff67ee2ac7a49bcd4
-
SSDEEP
1536:LC5isGNOb5neTbzBV5wGDhUiNF18dTX8JJAf12jmNc4Tuewp:O5nGnftOi18FqDjmmAwp
Malware Config
Signatures
Files
-
134fd742d98f73b9a243d4578cb42b462487802f601bc9f5d942614749bde67d.dll windows x86
b892f51b2a4e42a58ffac9ef89bbd24b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetSystemTimeAsFileTime
user32
GetSystemMetrics
CharNextA
msvcr71
sprintf
printf
malloc
free
realloc
_stricmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__security_error_handler
??3@YAXPAX@Z
??2@YAPAXI@Z
strrchr
_putenv
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE