StartWork
Static task
static1
Behavioral task
behavioral1
Sample
131a5107d4f43846239479db09a33fc0d3761dd076483b4224bc871ad70601f5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
131a5107d4f43846239479db09a33fc0d3761dd076483b4224bc871ad70601f5.dll
Resource
win10v2004-20220812-en
General
-
Target
131a5107d4f43846239479db09a33fc0d3761dd076483b4224bc871ad70601f5
-
Size
77KB
-
MD5
107e027d5e23083824dad5b5460447e0
-
SHA1
9dc92df312cd8ad8d0bbde71f863cdfc5262fd70
-
SHA256
131a5107d4f43846239479db09a33fc0d3761dd076483b4224bc871ad70601f5
-
SHA512
46f3436f3e8ee955bbc6b5529d1e526ecd43a84b35529bd788bef288234067651db1cf42aed9869a4f29d4e365ab738cf119feca789e80d83028a5d859721004
-
SSDEEP
1536:9B12X2XoVbqc/E1V3Uph5fzsrt4lveqOCZbAbK9/0:9B12XS4OeMK5fc4lBEb
Malware Config
Signatures
Files
-
131a5107d4f43846239479db09a33fc0d3761dd076483b4224bc871ad70601f5.dll windows x86
0219ad83f649a77f3180a606442f0e75
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
lstrlenW
lstrcmpiW
OutputDebugStringA
lstrcpyW
ExpandEnvironmentStringsW
CloseHandle
GetFileTime
GetLastError
CreateFileW
WriteFile
SetFileTime
SetLastError
ExitProcess
advapi32
RegCloseKey
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegCreateKeyExW
QueryServiceStatus
StartServiceW
ChangeServiceConfig2W
OpenServiceW
OpenSCManagerW
CloseServiceHandle
CreateServiceW
RegSetValueExW
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ