RLGPPJSNVK
Static task
static1
Behavioral task
behavioral1
Sample
c045fa0e6613c75efdf7b8b6a385929baf1870063119966b35a826f7efc13f5c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c045fa0e6613c75efdf7b8b6a385929baf1870063119966b35a826f7efc13f5c.dll
Resource
win10v2004-20220812-en
General
-
Target
c045fa0e6613c75efdf7b8b6a385929baf1870063119966b35a826f7efc13f5c
-
Size
218KB
-
MD5
09e1cc715e907aaad74c7d02aeda01c0
-
SHA1
79e65c1963c91e866ba1b841e0977e121321d21f
-
SHA256
c045fa0e6613c75efdf7b8b6a385929baf1870063119966b35a826f7efc13f5c
-
SHA512
e61a6f79c50cee8b2efc06b7992509ff6178be3e51bf765df50bde6823b5bc9df6b2a311aff951b97d904f7c8585f7472b77e9b698d3d5680baff2cdea61974a
-
SSDEEP
3072:aWc/otuh5gG68oLC82bklwZuFJiWpeVNlc+wON4lT/Q8c:UgtpD8okk0QeVw+tNOa
Malware Config
Signatures
Files
-
c045fa0e6613c75efdf7b8b6a385929baf1870063119966b35a826f7efc13f5c.dll windows x86
ac1ec840010bb7b863c8fef3d926c9b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
Beep
DisableThreadLibraryCalls
FindFirstFileExA
GetCurrentProcess
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WaitNamedPipeW
GetLocalTime
LocalAlloc
LocalFree
OpenEventA
lstrcatW
lstrcpyW
lstrlenW
WideCharToMultiByte
GetTimeZoneInformation
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
ExitProcess
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThread
GetModuleHandleA
HeapSize
IsDebuggerPresent
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
GetFileAttributesA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
HeapDestroy
VirtualFree
HeapAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
Exports
Exports
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ