CleanupResourceLoader
Static task
static1
Behavioral task
behavioral1
Sample
931c7dbfa004fffa18234a024b79b0393318823f6daa60e331fa5fdabc2a1967.dll
Resource
win7-20220812-en
General
-
Target
931c7dbfa004fffa18234a024b79b0393318823f6daa60e331fa5fdabc2a1967
-
Size
195KB
-
MD5
31efcac8f8d9e1a0e82b8f459b34e900
-
SHA1
1d29d3a140dc17770ff070e0f9c73637b66999c4
-
SHA256
931c7dbfa004fffa18234a024b79b0393318823f6daa60e331fa5fdabc2a1967
-
SHA512
8d4be4a113b24116359527cc2acc51c25f5a36df93d924a6585a9d628db624cd0067d4bcd1dca6edcc8cbbc7ae57b8cff0d2ee2976218d3bc65b0a46486b27c4
-
SSDEEP
3072:RlJ6OG8gZfYk5nGgrTuICVQJBlanwsUdCtrSrJeE:Rz6OG/Zwk5GgrKI5lawYJSrF
Malware Config
Signatures
Files
-
931c7dbfa004fffa18234a024b79b0393318823f6daa60e331fa5fdabc2a1967.dll windows x86
636e7f5a3a130b7254e29160f0e0b5b0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsDebuggerPresent
user32
GetSystemMetrics
CharNextA
msvcr100
memset
_stricmp
_unlock
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
realloc
free
malloc
printf
sprintf
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
__dllonexit
strrchr
_putenv
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE