ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
d3e4a45f06fd6bffd5dee6918a6c3d2d2aa8c058f0ca337a8b67a54c722a183e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3e4a45f06fd6bffd5dee6918a6c3d2d2aa8c058f0ca337a8b67a54c722a183e.dll
Resource
win10v2004-20220812-en
General
-
Target
d3e4a45f06fd6bffd5dee6918a6c3d2d2aa8c058f0ca337a8b67a54c722a183e
-
Size
8KB
-
MD5
06cae59c4cbd3b1ef0aece879bc4c4c6
-
SHA1
52c5d7a0ce20494ed37249541a5922f6e85f481a
-
SHA256
d3e4a45f06fd6bffd5dee6918a6c3d2d2aa8c058f0ca337a8b67a54c722a183e
-
SHA512
073ecc337fe4bf91207f24641457aff7dc079b1b193feb720224c052455f14442f918b6d96246397e9dcf844964b1a614924dd6d38492352e400a555b9352069
-
SSDEEP
96:Cp32VMeIk6VkayK9by8aYa5y+P5CEFTLxtnvJFOvJk9Rw4CI8yv:WmVMezdK9by8va5LrRFJFGJk9i1yv
Malware Config
Signatures
Files
-
d3e4a45f06fd6bffd5dee6918a6c3d2d2aa8c058f0ca337a8b67a54c722a183e.dll windows x86
64f259c1499e03fb24209f18c8d771b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
strncpy
wcstombs
??3@YAXPAX@Z
_strupr
??2@YAPAXI@Z
memmove
kernel32
FreeConsole
GetModuleHandleA
VirtualFree
VirtualProtectEx
VirtualAlloc
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualQueryEx
ReadProcessMemory
GetThreadContext
Sleep
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
advapi32
SetServiceStatus
RegisterServiceCtrlHandlerA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CreateProcessAsUserA
OpenProcessToken
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ