entrypoint
Static task
static1
Behavioral task
behavioral1
Sample
aee4a3bdabcf648672f4eaedb356117851c77366bea6f4acc5618c1a135b0978.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aee4a3bdabcf648672f4eaedb356117851c77366bea6f4acc5618c1a135b0978.dll
Resource
win10v2004-20220812-en
General
-
Target
aee4a3bdabcf648672f4eaedb356117851c77366bea6f4acc5618c1a135b0978
-
Size
336KB
-
MD5
82809bfe938af289e79cd32d72c57b94
-
SHA1
9b1416c6ee6b9520adc26ffe00670b3d0176dd10
-
SHA256
aee4a3bdabcf648672f4eaedb356117851c77366bea6f4acc5618c1a135b0978
-
SHA512
2bca234b06c65e462df267b5767a847d26712a7fbc3ef0282200b340a473ae8ca0b119472dbd9414749024160d1c7f7a9db584d2cf8b365ff6fb533c38b03af3
-
SSDEEP
6144:rAMXlVSqiSFptF4ElKSHnu5jpQudhVzveNS4ON/TeqQ5qo9qpI:0MVc5SnD47RfgrOIqQ5qo9i
Malware Config
Signatures
Files
-
aee4a3bdabcf648672f4eaedb356117851c77366bea6f4acc5618c1a135b0978.dll windows x86
fd04443b7b196fb5b309b729d51826cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcmp
strrchr
sscanf
strstr
memset
atol
_beginthreadex
time
__CxxLongjmpUnwind
strcmp
_ftol
_setjmp3
atoi
malloc
exit
vsprintf
atof
_tell
_write
?terminate@@YAXXZ
_lseek
_except_handler3
_initterm
_adjust_fdiv
__dllonexit
??1type_info@@UAE@XZ
_onexit
_purecall
memcpy
_CxxThrowException
strncpy
longjmp
sprintf
strcat
strlen
strcpy
strncat
free
__CxxFrameHandler
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
isspace
_access
_fullpath
_read
_close
_itoa
_makepath
_splitpath
_open
_unlink
ws2_32
WSAStartup
WSASetLastError
WSACleanup
WSAGetLastError
gethostbyname
kernel32
GetTempFileNameA
GetTempPathA
lstrlenA
GetLastError
FormatMessageA
LocalFree
ReleaseMutex
CreateMutexA
GetExitCodeThread
WaitForSingleObject
CloseHandle
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
LoadLibraryA
user32
GetFocus
SetFocus
LoadImageA
DestroyIcon
advapi32
RegCloseKey
RegCreateKeyA
RegQueryValueA
shell32
ShellExecuteA
ole32
CoUninitialize
CoInitialize
msvcp60
??0Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
wininet
InternetGetConnectedState
InternetAutodial
HttpQueryInfoA
InternetReadFile
InternetSetOptionA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetGetLastResponseInfoA
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
HttpOpenRequestA
Exports
Exports
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ