Static task
static1
Behavioral task
behavioral1
Sample
40d3f3db8c7357c420d524d52455a24364b2266fb94bc5917ccd7e892dc064be.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
40d3f3db8c7357c420d524d52455a24364b2266fb94bc5917ccd7e892dc064be.dll
Resource
win10v2004-20220812-en
General
-
Target
40d3f3db8c7357c420d524d52455a24364b2266fb94bc5917ccd7e892dc064be
-
Size
72KB
-
MD5
1073af92223a2ec1d169a27e38b0f550
-
SHA1
d7237b49f378471bb5a8db0c3c135c7ec82f3b88
-
SHA256
40d3f3db8c7357c420d524d52455a24364b2266fb94bc5917ccd7e892dc064be
-
SHA512
c60f2ff8a131805387b4e69b8d459c117b6e98c3514d1a5e256e9ba41b7f0ce8595bed022ba810618b6381f6c7df47eaead41d05efed2314a316d8acef33a110
-
SSDEEP
1536:rRDi+KgTduXtXxzfEjzi9UW8zIyl8Db76X02jLJ:rRp3TduX1xzRipIyu76X02Z
Malware Config
Signatures
Files
-
40d3f3db8c7357c420d524d52455a24364b2266fb94bc5917ccd7e892dc064be.dll windows x86
9a17e20e858f36509dca80403f0400c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalUnlock
GetCommandLineA
GetStartupInfoA
ExitProcess
ntdll
ZwCreateTimer
ZwReplaceKey
NtQueryIntervalProfile
NtSignalAndWaitForSingleObject
RtlLookupAtomInAtomTable
NtReplyWaitReplyPort
NtEnumerateKey
NtQueryInformationFile
RtlLargeIntegerAdd
RtlInitializeAtomPackage
CsrFreeCaptureBuffer
RtlUnicodeStringToInteger
wcstombs
NtSaveMergedKeys
RtlProtectHeap
ZwAccessCheckAndAuditAlarm
Sections
.text Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
weIJUNLi Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ