ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
58d4f31f591fd77f6e85cc52563e0b08b2a4c9aba3fcd70712036c2832a5a9e6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58d4f31f591fd77f6e85cc52563e0b08b2a4c9aba3fcd70712036c2832a5a9e6.dll
Resource
win10v2004-20220812-en
General
-
Target
58d4f31f591fd77f6e85cc52563e0b08b2a4c9aba3fcd70712036c2832a5a9e6
-
Size
8KB
-
MD5
84cbdc29b5ceed9b48e8064a8eb0a8a0
-
SHA1
47bd763f589f07d3486103ae5bb8c276a1f6c4d2
-
SHA256
58d4f31f591fd77f6e85cc52563e0b08b2a4c9aba3fcd70712036c2832a5a9e6
-
SHA512
cda9695acee1a4c42d5b92bcb7dc771578c53a7784da23cf7135ae7d5e12f9563793eb645ab1f476d41e11251f66f7f8f5fa83acacac4bc5b2f8e10053e1be7d
-
SSDEEP
96:Cp32VMeIk6VkayK9by8aYa5y+P5CEFTLxtnvJFOvJk9Rw4CI8yTokWKZ:WmVMezdK9by8va5LrRFJFGJk9i1yVWKZ
Malware Config
Signatures
Files
-
58d4f31f591fd77f6e85cc52563e0b08b2a4c9aba3fcd70712036c2832a5a9e6.dll windows x86
64f259c1499e03fb24209f18c8d771b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
strncpy
wcstombs
??3@YAXPAX@Z
_strupr
??2@YAPAXI@Z
memmove
kernel32
FreeConsole
GetModuleHandleA
VirtualFree
VirtualProtectEx
VirtualAlloc
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualQueryEx
ReadProcessMemory
GetThreadContext
Sleep
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
advapi32
SetServiceStatus
RegisterServiceCtrlHandlerA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CreateProcessAsUserA
OpenProcessToken
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ