OfIsSuccessfullyComponentsMSMQ
Static task
static1
Behavioral task
behavioral1
Sample
c711ce7ef291b6179aebd6a299b84dc93d115a9b26cc6f0932289b81f46a2272.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c711ce7ef291b6179aebd6a299b84dc93d115a9b26cc6f0932289b81f46a2272.dll
Resource
win10v2004-20220901-en
General
-
Target
c711ce7ef291b6179aebd6a299b84dc93d115a9b26cc6f0932289b81f46a2272
-
Size
162KB
-
MD5
838ca17855c8344033ace83ce5802cf0
-
SHA1
6dc1145f53d9f01b052c9d423cf1eef9340b41f0
-
SHA256
c711ce7ef291b6179aebd6a299b84dc93d115a9b26cc6f0932289b81f46a2272
-
SHA512
1e730d243fd0b6b259658080863bd9b201bac6d677eaafba91900692b533932b9ae69bbeefbeeb303bbd5cc846a3332dda8882f16855761999056fb1ba09423e
-
SSDEEP
3072:7dSdYrPuUlVbFxrwKD35cm3QoBKjVkuk+bAGd88WITOygI:7dZPLbPrpeEATeI
Malware Config
Signatures
Files
-
c711ce7ef291b6179aebd6a299b84dc93d115a9b26cc6f0932289b81f46a2272.dll windows x86
48875b534cea46a829e8790914569064
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalFree
LeaveCriticalSection
FreeLibrary
CloseHandle
GetFileSize
MapViewOfFile
CreateFileMappingW
SizeofResource
LockResource
LoadResource
FindResourceW
GetLocalTime
GetModuleFileNameW
RtlUnwind
WriteFile
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
Sleep
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
SetFilePointer
user32
IsWindowEnabled
AdjustWindowRect
FindWindowA
IsCharUpperA
msvcrt
wcschr
fseek
ftell
memmove
calloc
isdigit
isleadbyte
isxdigit
localeconv
wctomb
iswctype
wcstombs
realloc
ungetc
malloc
free
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ