GetNewInf
Static task
static1
Behavioral task
behavioral1
Sample
0f0d7d8102c0efacc759b110b9ad982edb8054e4ff093129ae53a0c989c8cffb.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0f0d7d8102c0efacc759b110b9ad982edb8054e4ff093129ae53a0c989c8cffb.dll
Resource
win10v2004-20220812-en
General
-
Target
0f0d7d8102c0efacc759b110b9ad982edb8054e4ff093129ae53a0c989c8cffb
-
Size
156KB
-
MD5
748c49614a9eefc560e876fac533de64
-
SHA1
1b675d63dce670f909289fc5b608115cd23b6e79
-
SHA256
0f0d7d8102c0efacc759b110b9ad982edb8054e4ff093129ae53a0c989c8cffb
-
SHA512
2c1452ff0196a4ab697d35672c1de93eacf317206f8d7aa2e1c94d3c93daa26e8da41d8a4c53277f7cb9add49ec68ba724449df4b89c9674fbbfe7e80d36e59a
-
SSDEEP
1536:/B2dWgyCYSuoc36y8JMVmXnYJ9bFb4fTPOgsjFmoJN9wC4JQo9e5B6:/B2YgyCYhoc36y8JLXnYJ9CS/NsaoI3
Malware Config
Signatures
Files
-
0f0d7d8102c0efacc759b110b9ad982edb8054e4ff093129ae53a0c989c8cffb.dll windows x86
eb00e9659e69f6ff0cec1c176966dc41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CloseHandle
FlushFileBuffers
SetStdHandle
ReadFile
LoadLibraryA
GetOEMCP
GetACP
RtlUnwind
HeapFree
HeapAlloc
RaiseException
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetProcAddress
SetUnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetStringTypeA
GetStringTypeW
GetCPInfo
ws2_32
closesocket
WSACleanup
select
__WSAFDIsSet
send
recv
WSAStartup
socket
htons
inet_addr
gethostbyname
connect
Exports
Exports
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ