QuerySORDI
Static task
static1
Behavioral task
behavioral1
Sample
dc27ca901f71e2dcfec0c8975aa8d8406146922108a1f97071755ea35a166c00.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc27ca901f71e2dcfec0c8975aa8d8406146922108a1f97071755ea35a166c00.dll
Resource
win10v2004-20220812-en
General
-
Target
dc27ca901f71e2dcfec0c8975aa8d8406146922108a1f97071755ea35a166c00
-
Size
48KB
-
MD5
8fe3223aee257add4c510316ae318fbc
-
SHA1
c0792277136270dc1df19184a8cee0b6edb7df85
-
SHA256
dc27ca901f71e2dcfec0c8975aa8d8406146922108a1f97071755ea35a166c00
-
SHA512
adff724c846f19312e4393ba7078c2931d8968427dbd8bf5eb3b9ec5a21d1b41e3f2d3a68066e2905f246b103656ee27327f5f18276a4228e5ed77af9e0efef9
-
SSDEEP
768:GZvyW6tCMMhMKRqxoRJ1x8715ILEC9yg:G4RtxKkxor1O714By
Malware Config
Signatures
Files
-
dc27ca901f71e2dcfec0c8975aa8d8406146922108a1f97071755ea35a166c00.dll windows x86
5011233f5b8dd8619e42cf5ab1d63652
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
free
rewind
fclose
strstr
fgets
fopen
strchr
sprintf
strtol
sscanf
calloc
strncpy
malloc
strtoul
fprintf
tolower
strncmp
fread
vsprintf
atoi
realloc
getenv
toupper
_strdup
_findfirst
_getdcwd
_findnext
_findclose
_getcwd
_initterm
_adjust_fdiv
isspace
strtok
kernel32
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 921B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ