DriverProc
Static task
static1
Behavioral task
behavioral1
Sample
9e7f9f0a65a7df043bb4fff03b4dac834b80df59eec74d1ed2c2474f875f7d84.dll
Resource
win7-20220812-en
General
-
Target
9e7f9f0a65a7df043bb4fff03b4dac834b80df59eec74d1ed2c2474f875f7d84
-
Size
140KB
-
MD5
4f7130c11b24dd464a0296e0600dc140
-
SHA1
2d7a6604527a2a2c4c41b92873ee5e0bfea35776
-
SHA256
9e7f9f0a65a7df043bb4fff03b4dac834b80df59eec74d1ed2c2474f875f7d84
-
SHA512
c016eba449cd12d765a0f57794faf895a03e9fbdd13c28b357e798e7ca50abdc24210b91625ffed94b7ed9050dcffc9e5a42f785fc2e41652daf51bc5bd825b0
-
SSDEEP
3072:h/z54pupNBuG2Z5co9ZtiOW34WaUIJlvUexvLEO:1zepupNBst+otvXxz
Malware Config
Signatures
Files
-
9e7f9f0a65a7df043bb4fff03b4dac834b80df59eec74d1ed2c2474f875f7d84.dll windows x86
1463a7293ffbaa32b17e88e4322d59ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
LocalFree
WideCharToMultiByte
SetHandleCount
GetStdHandle
VirtualFree
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
RtlUnwind
GetStringTypeW
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
LocalAlloc
GetCPInfo
FreeEnvironmentStringsW
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
VirtualAlloc
HeapReAlloc
user32
SetScrollRange
GetDlgCtrlID
GetScrollPos
SetScrollPos
wsprintfA
SetDlgItemTextA
EndDialog
GetDlgItem
MessageBoxA
DialogBoxParamA
winmm
DefDriverProc
Exports
Exports
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 465KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE