Static task
static1
Behavioral task
behavioral1
Sample
4fe17d0c478ebfb74bd4f1f9e77e6dc9b7d62a992b70a7cd6d98767630693dbb.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4fe17d0c478ebfb74bd4f1f9e77e6dc9b7d62a992b70a7cd6d98767630693dbb.dll
Resource
win10v2004-20220812-en
General
-
Target
4fe17d0c478ebfb74bd4f1f9e77e6dc9b7d62a992b70a7cd6d98767630693dbb
-
Size
17KB
-
MD5
8332748bee89bbcbc0ee3d2071cac956
-
SHA1
7e486523ea3fd0f5975d92f64278c8fd17b66548
-
SHA256
4fe17d0c478ebfb74bd4f1f9e77e6dc9b7d62a992b70a7cd6d98767630693dbb
-
SHA512
584cad70a1557c588483935866d7a85130d013724988cc2ed94909417662ab11aedebdc9ae09c8613775ee2345cbf94705b0115f38550a977cd0ece9925c44f9
-
SSDEEP
192:QcqTeage7+jpfTRi6hbQtICHfBhRYrGaq/6v9nYesoHtjvdrRXAOxcMc:Qc7aqjNRi6w/RYTFn5HtjlrRXBxc5
Malware Config
Signatures
Files
-
4fe17d0c478ebfb74bd4f1f9e77e6dc9b7d62a992b70a7cd6d98767630693dbb.dll windows x86
e04272535558d885537e8a91127a6b53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
srand
strrchr
shlwapi
SHDeleteKeyA
ws2_32
freeaddrinfo
WSACleanup
getaddrinfo
WSAStartup
WSAAddressToStringA
kernel32
lstrcpyA
CreateToolhelp32Snapshot
GetModuleFileNameA
DeviceIoControl
MultiByteToWideChar
Sleep
GetProcAddress
GetModuleHandleA
CreateThread
CreateFileA
lstrlenA
WaitForSingleObject
OpenProcess
TerminateThread
ReadFile
lstrcmpiA
GetExitCodeThread
CloseHandle
GetSystemTime
DeleteFileA
LoadLibraryExA
FreeLibrary
Process32First
WriteFile
user32
SetProcessWindowStation
OpenDesktopA
wsprintfA
OpenWindowStationA
SetThreadDesktop
advapi32
RegCloseKey
OpenSCManagerA
RegOpenKeyExA
StartServiceA
CreateServiceA
RegSetValueExA
CloseServiceHandle
OpenProcessToken
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ