MPACreateComponentInstance
Static task
static1
Behavioral task
behavioral1
Sample
0bae38a290f68d296a16fceb49cdfec6f2b1b51f01a232abfd0e1b8223b26173.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0bae38a290f68d296a16fceb49cdfec6f2b1b51f01a232abfd0e1b8223b26173.dll
Resource
win10v2004-20220901-en
General
-
Target
0bae38a290f68d296a16fceb49cdfec6f2b1b51f01a232abfd0e1b8223b26173
-
Size
96KB
-
MD5
82df1dc358c3f38a41c779d83b2909bf
-
SHA1
1295f56f36085cbd020775320fd10b27b4149699
-
SHA256
0bae38a290f68d296a16fceb49cdfec6f2b1b51f01a232abfd0e1b8223b26173
-
SHA512
226053c1dd1c209d5fdf10fb2c4969aaaf28c82f6c722c91188619e9ddd114bb80dafe14f4eff306321d906c3dfa75415cfa70529d4776363e6a72fdaca43ae4
-
SSDEEP
1536:IiUXJxfkpWiMHAbEJ1nBZPD9Ic5eMCzLuV+EoTO2k5+V:U/fwWlAgX6c5eMULuzox5
Malware Config
Signatures
Files
-
0bae38a290f68d296a16fceb49cdfec6f2b1b51f01a232abfd0e1b8223b26173.dll windows x86
dfac18bf99d220fc5386fff620968d4d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pncrt
_stricmp
_onexit
__dllonexit
_initterm
strrchr
realloc
malloc
free
_purecall
_ftol
sprintf
strchr
_beginthread
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
_adjust_fdiv
_splitpath
_putenv
printf
kernel32
WriteFile
SetErrorMode
GetProcAddress
FindNextFileA
CreateDirectoryA
WaitForSingleObject
SetThreadPriority
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
FindFirstFileA
LoadLibraryA
FindClose
FreeLibrary
SetFilePointer
SetEndOfFile
CreateFileA
VirtualAlloc
GetDiskFreeSpaceA
CloseHandle
VirtualFree
DeleteFileA
user32
LoadStringA
wsprintfA
MessageBoxA
GetSystemMetrics
CharNextA
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE