_DllMain@12
Static task
static1
Behavioral task
behavioral1
Sample
9080ac4a77291ce165e11dd413e33dbc2608977e85e56453093ef4454b986323.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9080ac4a77291ce165e11dd413e33dbc2608977e85e56453093ef4454b986323.dll
Resource
win10v2004-20220812-en
General
-
Target
9080ac4a77291ce165e11dd413e33dbc2608977e85e56453093ef4454b986323
-
Size
175KB
-
MD5
06d69e1cd2cdabfded533e9043d26384
-
SHA1
c4f75a45239699eb09c32af71f5530cc7b4a66ac
-
SHA256
9080ac4a77291ce165e11dd413e33dbc2608977e85e56453093ef4454b986323
-
SHA512
803b6017d3d896804f36fc4ec1ccf79661622296e9f4e106b52f74288921a63ce7918d199a34310eb1952a95a68b78e177239bbcbcddefc8fd8e0df4f8e9d1ba
-
SSDEEP
3072:S9e182Ssd3WTDvSa1dQj9SXtRWKI8zoWKSnPdrcf4TnrUFfd+EuaYWkc39R:ig82SsdI7WItjrPx1T4jYWv3P
Malware Config
Signatures
Files
-
9080ac4a77291ce165e11dd413e33dbc2608977e85e56453093ef4454b986323.dll windows x86
3e96c836ddeb54ebfb6931a24e493c4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
msvcrt
sscanf
kernel32
LocalAlloc
LoadLibraryA
VirtualProtect
GetModuleFileNameA
user32
wsprintfA
MessageBoxA
advapi32
AdjustTokenPrivileges
shell32
ShellExecuteA
ole32
CoCreateGuid
shlwapi
PathFileExistsA
Exports
Exports
Sections
.text Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bad0 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bad1 Size: - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bad2 Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ