dfdyek
Static task
static1
Behavioral task
behavioral1
Sample
968418621af22f49929d43761eecbb3ff3f9905b05b6d8f636518d6a127d648d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
968418621af22f49929d43761eecbb3ff3f9905b05b6d8f636518d6a127d648d.dll
Resource
win10v2004-20220812-en
General
-
Target
968418621af22f49929d43761eecbb3ff3f9905b05b6d8f636518d6a127d648d
-
Size
59KB
-
MD5
2166984935c54ed9a980ada380b3102b
-
SHA1
4302e874e19a1e6a5f5cd0d9b24d3f116089553e
-
SHA256
968418621af22f49929d43761eecbb3ff3f9905b05b6d8f636518d6a127d648d
-
SHA512
6bda5f79cc6f810d9f358f8ab86af8daded702d0b80bbc3cce597707945306e0addd6ce917cb02d892e1d1e4b60af824aaab18d8b635a459fc3cfc71bd74d5ec
-
SSDEEP
768:QOiRgX6aVAP96DcujhBgAdGVwHjR9aEVSqh0ZTlkNmuRXL8Ox12OoesHTTITbl61:QgK2cChR9asmigOxceN
Malware Config
Signatures
Files
-
968418621af22f49929d43761eecbb3ff3f9905b05b6d8f636518d6a127d648d.dll windows x86
0539984acae99c953e502b5cd439d399
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetPrivateProfileSectionA
SetErrorMode
UnmapViewOfFile
WriteFile
HeapAlloc
GetFileSize
GetTickCount
GetTempPathA
SetUnhandledExceptionFilter
FindFirstFileA
FindFirstFileExA
ReadFile
SetFilePointer
GetFileAttributesA
GetCurrentProcess
LocalAlloc
GetProcessHeap
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
FindClose
CreateFileMappingA
GetTempFileNameA
GetModuleHandleA
SetLastError
GetPrivateProfileStringA
GetCurrentDirectoryA
CreateFileA
GetLastError
OpenProcess
GetFileInformationByHandle
RemoveDirectoryA
FindNextFileA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
MapViewOfFile
CopyFileA
GetFullPathNameA
QueryPerformanceCounter
GetFileAttributesExA
DeleteFileA
FlushViewOfFile
SetEndOfFile
SetCurrentDirectoryA
GetProcAddress
ExpandEnvironmentStringsA
Sleep
FreeLibrary
HeapFree
CloseHandle
LocalFree
SetFileAttributesA
LoadLibraryA
TerminateProcess
user32
LoadIconA
LoadCursorA
RegisterClassA
FindWindowExA
MoveWindow
UnregisterClassA
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
ConvertStringSidToSidA
OpenProcessToken
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
gdi32
GetStockObject
Exports
Exports
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ