G
Static task
static1
Behavioral task
behavioral1
Sample
36a753fc4d96991f2b4de0d2edbcad6985fe86704d1df1d65137e320062a81f3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36a753fc4d96991f2b4de0d2edbcad6985fe86704d1df1d65137e320062a81f3.dll
Resource
win10v2004-20220812-en
General
-
Target
36a753fc4d96991f2b4de0d2edbcad6985fe86704d1df1d65137e320062a81f3
-
Size
63KB
-
MD5
1a1a212cebd8489a09b9d61a9616e340
-
SHA1
a6ce7a1a91cd855f1407d50f87f9b0e817ce343d
-
SHA256
36a753fc4d96991f2b4de0d2edbcad6985fe86704d1df1d65137e320062a81f3
-
SHA512
5a537abe6ca1575f182e43284b4b2bc71b2b3aa98de1447cdf6902d07a2f06e441114328d4bc6e7d4a94e30cd465097d3eebaad23fc0e505e083e8b0d30d0f9f
-
SSDEEP
1536:cltyOI/MeCilp575B1HB3JMKj4oWbgH3Wgywy7:kcXDNB1hZVLWbgH3Vy7
Malware Config
Signatures
Files
-
36a753fc4d96991f2b4de0d2edbcad6985fe86704d1df1d65137e320062a81f3.dll windows x86
7652a977034afd88bc0aaf95e8df6f83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetLocalTime
IsBadReadPtr
WideCharToMultiByte
lstrcpyW
WriteFile
GetCurrentProcessId
CreateFileA
LocalFree
GetLastError
GetTempPathA
ReadFile
GetModuleHandleA
CreateThread
GetModuleFileNameA
GlobalLock
OutputDebugStringA
ExitProcess
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCommandLineA
Sleep
VirtualProtectEx
WriteProcessMemory
WinExec
GetCurrentProcess
CloseHandle
GlobalSize
SetFilePointer
user32
GetClassNameA
GetWindowTextA
GetForegroundWindow
wsprintfA
gdi32
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
CreateDCA
advapi32
RegCloseKey
SetNamedSecurityInfoA
OpenSCManagerA
OpenServiceA
ControlService
DeleteService
CloseServiceHandle
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
RegQueryValueExA
RegOpenKeyExA
SetEntriesInAclA
ole32
CreateStreamOnHGlobal
GetHGlobalFromStream
CLSIDFromString
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Xran@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
gdiplus
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDisposeImage
GdiplusShutdown
GdipSaveImageToStream
wininet
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetOptionA
InternetCloseHandle
InternetReadFile
HttpSendRequestA
winmm
timeSetEvent
msvcrt
_onexit
_initterm
_adjust_fdiv
wcscpy
memmove
__CxxFrameHandler
atoi
strstr
_itoa
__dllonexit
free
malloc
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ