WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
41c5a5d01fc7f140dd0006559ed8b8ef874e6cac3f776463e875d3816f958203.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
41c5a5d01fc7f140dd0006559ed8b8ef874e6cac3f776463e875d3816f958203.dll
Resource
win10v2004-20220812-en
General
-
Target
41c5a5d01fc7f140dd0006559ed8b8ef874e6cac3f776463e875d3816f958203
-
Size
44KB
-
MD5
831e727d6fab8ff8d95582201c7af2a0
-
SHA1
7e6cd657bbd21546ba75385155a0ae4d9bc3b96e
-
SHA256
41c5a5d01fc7f140dd0006559ed8b8ef874e6cac3f776463e875d3816f958203
-
SHA512
efc004f4ec8db99c3b99c86295919d76bff70cf216208bb175e97243174224b869322da1b965e43b7d5a922a6717b8d59841340bc6784f6cead8510a9b3390b4
-
SSDEEP
768:vphD4qR9LY8Jqx8bRPn9uOt8WoYecFTgeoU:LP97T/t8H5cFTTf
Malware Config
Signatures
Files
-
41c5a5d01fc7f140dd0006559ed8b8ef874e6cac3f776463e875d3816f958203.dll windows x86
bcd2061b7c074a7242f8c3600ad04dfe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
VirtualProtectEx
GetLocalTime
Sleep
SetFilePointer
CreateFileA
GetCurrentProcess
GetProcAddress
LoadLibraryA
ReadFile
GetModuleFileNameA
GetCurrentProcessId
GetModuleHandleA
CreateThread
ExitProcess
GlobalLock
CloseHandle
GlobalSize
ExpandEnvironmentStringsA
user32
wsprintfA
ToAscii
GetKeyboardState
GetWindowTextA
GetClassNameA
GetForegroundWindow
gdi32
BitBlt
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
DeleteDC
CreateDCA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CreateStreamOnHGlobal
CLSIDFromString
GetHGlobalFromStream
msvcp60
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?_Xran@std@@YAXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
gdiplus
GdipSaveImageToStream
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDisposeImage
GdiplusStartup
GdiplusShutdown
wininet
InternetConnectA
InternetOpenA
InternetSetOptionA
HttpSendRequestA
InternetCloseHandle
InternetReadFile
HttpOpenRequestA
winmm
timeKillEvent
timeSetEvent
msvcrt
strstr
_itoa
atoi
__CxxFrameHandler
_adjust_fdiv
_initterm
_onexit
__dllonexit
free
sprintf
memmove
malloc
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ