CreateDownloadMgr
Static task
static1
Behavioral task
behavioral1
Sample
cec8ab3d6ef9b99bd2331ec45302090d3cb6e2ce4658bfd25fb89a68fcf0db4b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cec8ab3d6ef9b99bd2331ec45302090d3cb6e2ce4658bfd25fb89a68fcf0db4b.dll
Resource
win10v2004-20221111-en
General
-
Target
cec8ab3d6ef9b99bd2331ec45302090d3cb6e2ce4658bfd25fb89a68fcf0db4b
-
Size
288KB
-
MD5
2fb564ced54215a8489433014cd58515
-
SHA1
b10e8d9980f0208145822c231c716ff4e5d20925
-
SHA256
cec8ab3d6ef9b99bd2331ec45302090d3cb6e2ce4658bfd25fb89a68fcf0db4b
-
SHA512
b7cf886d0042e7e9faea0699818eb334c09297b2442c7d2b859351be533a8c2496b5fbcdd2706226c6188f28eb7954a29a5d2c8902e30ed46cc87f40bfdef31b
-
SSDEEP
6144:u7/Hr0ROhrejYG3NysoWRSUZTscUMwlX:ubgRuzG3cWRSuTMMw
Malware Config
Signatures
Files
-
cec8ab3d6ef9b99bd2331ec45302090d3cb6e2ce4658bfd25fb89a68fcf0db4b.dll windows x86
e3e02fbb6e9943daa207fbc98b210dc9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mglobal
ReleaseMoyeaException
GetMoyeaException
libcurl
curl_global_init
curl_easy_pause
curl_easy_getinfo
curl_easy_cleanup
curl_easy_perform
curl_easy_setopt
curl_global_cleanup
curl_easy_init
kernel32
GetConsoleMode
GetConsoleCP
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
FindVolumeClose
GetDriveTypeA
GetVolumeInformationA
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
TerminateProcess
GetLastError
GetProcAddress
SetFileAttributesA
LoadLibraryA
GetDiskFreeSpaceExA
GetVersionExA
CloseHandle
FindFirstVolumeW
FindClose
GetFullPathNameW
GetEnvironmentVariableW
FindFirstFileW
SetFilePointer
SetEndOfFile
GetLocaleInfoW
InterlockedIncrement
InterlockedDecrement
CreateDirectoryW
WaitForSingleObject
WriteFile
GetCommandLineA
InitializeCriticalSection
WideCharToMultiByte
Sleep
LeaveCriticalSection
ReadFile
CreateFileW
MultiByteToWideChar
InterlockedExchange
EnterCriticalSection
RemoveDirectoryW
GetModuleFileNameA
FindNextFileW
GetFileAttributesExW
DeleteCriticalSection
DeleteFileW
ResumeThread
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetStringTypeA
WriteConsoleW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetTimeZoneInformation
GetStartupInfoA
GetFileType
SetHandleCount
GetCurrentDirectoryA
HeapSize
SetLastError
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
HeapReAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetProcessHeap
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA
ExitProcess
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetConsoleOutputCP
ole32
CoInitialize
CoCreateGuid
ws2_32
gethostbyname
send
htons
connect
closesocket
setsockopt
socket
recv
winmm
timeGetTime
Exports
Exports
Sections
.text Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ