D5mydll8dllprintFZv
Static task
static1
Behavioral task
behavioral1
Sample
792ecf48568324f0b06312e2fce958e33b0d2eaef6597ea6cffdf74a25ba825f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
792ecf48568324f0b06312e2fce958e33b0d2eaef6597ea6cffdf74a25ba825f.dll
Resource
win10v2004-20220812-en
General
-
Target
792ecf48568324f0b06312e2fce958e33b0d2eaef6597ea6cffdf74a25ba825f
-
Size
100KB
-
MD5
2eac512df32a9a169cafc1722db88a80
-
SHA1
1af0a399f33a817acaa2a12eb6570bb29203a53d
-
SHA256
792ecf48568324f0b06312e2fce958e33b0d2eaef6597ea6cffdf74a25ba825f
-
SHA512
a0ccc3bcf07eb3d33793efcadc17fbb6516ca3802d5db38e4e823134d8deb5914d816917101671b65d15573fd7f8f6f54c8b19e88e1e4a2234732399d430b50e
-
SSDEEP
3072:jPuStuSRK8DWSDj8fFkpZ0vCOZyJ7GZ0:N89kpICOZyJ7GG
Malware Config
Signatures
Files
-
792ecf48568324f0b06312e2fce958e33b0d2eaef6597ea6cffdf74a25ba825f.dll windows x86
3e6fd4e0604dc548807145e84448191d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ReadFile
GetCPInfo
GetOEMCP
GetACP
SetFilePointer
GlobalAlloc
GlobalFree
GetFileType
DeleteFileA
SetHandleCount
GetStringTypeA
WideCharToMultiByte
WriteConsoleA
SetUnhandledExceptionFilter
ExitProcess
SetConsoleCtrlHandler
GetLastError
GetTickCount
ReleaseSemaphore
CreateSemaphoreA
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
CreateThread
ExitThread
GetVersion
ResumeThread
GetThreadContext
SuspendThread
VirtualAlloc
TlsAlloc
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetStdHandle
WaitForSingleObject
GetExitCodeThread
RaiseException
TlsGetValue
GetCurrentThread
GetCurrentProcess
DuplicateHandle
TlsSetValue
OpenThread
GetModuleHandleA
GetProcAddress
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
user32
MessageBoxA
Exports
Exports
Sections
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT$XIA Size: 22KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 28B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE