Static task
static1
Behavioral task
behavioral1
Sample
5a80aa0360746fac8503fa4f2399d8e171beb9843aa669c94e2c1aa2146911a1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a80aa0360746fac8503fa4f2399d8e171beb9843aa669c94e2c1aa2146911a1.dll
Resource
win10v2004-20220812-en
General
-
Target
5a80aa0360746fac8503fa4f2399d8e171beb9843aa669c94e2c1aa2146911a1
-
Size
17KB
-
MD5
0f6253ff78c1f053d2271214d71e7270
-
SHA1
31238e9dc410d8db160c50fe9f411cd8e625a5ca
-
SHA256
5a80aa0360746fac8503fa4f2399d8e171beb9843aa669c94e2c1aa2146911a1
-
SHA512
e5a215161d45a4414fda9cd42e98ef7c1193acb788462373dfb3ed780f342e6ab12e7403e335963b4417f1e1749a94777e38a53abb8f638c9a398c883763a08f
-
SSDEEP
384:QKCaaUKTGdRq29i/RxTj1bTUkcStH3Gv:iaaUJdc29i/RxTjJTUkPH3G
Malware Config
Signatures
Files
-
5a80aa0360746fac8503fa4f2399d8e171beb9843aa669c94e2c1aa2146911a1.dll windows x86
e04272535558d885537e8a91127a6b53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
srand
strrchr
shlwapi
SHDeleteKeyA
ws2_32
freeaddrinfo
WSACleanup
getaddrinfo
WSAStartup
WSAAddressToStringA
kernel32
lstrcpyA
CreateToolhelp32Snapshot
GetModuleFileNameA
DeviceIoControl
MultiByteToWideChar
Sleep
GetProcAddress
GetModuleHandleA
CreateThread
CreateFileA
lstrlenA
WaitForSingleObject
OpenProcess
TerminateThread
ReadFile
lstrcmpiA
GetExitCodeThread
CloseHandle
GetSystemTime
DeleteFileA
LoadLibraryExA
FreeLibrary
Process32First
WriteFile
user32
SetProcessWindowStation
OpenDesktopA
wsprintfA
OpenWindowStationA
SetThreadDesktop
advapi32
RegCloseKey
OpenSCManagerA
RegOpenKeyExA
StartServiceA
CreateServiceA
RegSetValueExA
CloseServiceHandle
OpenProcessToken
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ