Static task
static1
Behavioral task
behavioral1
Sample
adb3bb4494e4c1c4188e816f64cc2972c4ccf2b8ec533521a25879bf55491d77.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adb3bb4494e4c1c4188e816f64cc2972c4ccf2b8ec533521a25879bf55491d77.dll
Resource
win10v2004-20220812-en
General
-
Target
adb3bb4494e4c1c4188e816f64cc2972c4ccf2b8ec533521a25879bf55491d77
-
Size
155KB
-
MD5
414fe2dee3a8a3aa1656d2565e59e128
-
SHA1
abd27d9edde5615d27c2cef7b1e91c6ff8860f31
-
SHA256
adb3bb4494e4c1c4188e816f64cc2972c4ccf2b8ec533521a25879bf55491d77
-
SHA512
d8d6d0bded704cac0d6ad135331c38721a9b540bf06427151266581f54fd830aba710e061c99a7f714bfe576b2a66accae7d5e7d85d81c246eff7293e5ae4d56
-
SSDEEP
3072:W4bEXxvfGK1Qa8JRZemm3Qnc3MXInJjalr:/bE5fxP8J2MXEJ
Malware Config
Signatures
Files
-
adb3bb4494e4c1c4188e816f64cc2972c4ccf2b8ec533521a25879bf55491d77.dll windows x86
77927aec1f4f1a19b987587c5331f947
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
DeleteFileA
Sleep
WriteFile
GetTempPathA
ReadFile
GetFileSize
CreateFileA
TerminateThread
CreateToolhelp32Snapshot
GetCurrentProcessId
SetThreadPriority
TerminateProcess
CreateEventA
OpenEventA
GetTickCount
OutputDebugStringA
GetCommandLineA
GetWindowsDirectoryA
Process32Next
Process32First
GetVersionExA
GetLocalTime
CreateProcessA
OpenProcess
GetSystemDirectoryA
GetCurrentThreadId
DeviceIoControl
ExitProcess
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
MultiByteToWideChar
WriteProcessMemory
VirtualProtectEx
GetProcAddress
ResumeThread
GetCurrentThread
GetLastError
SetErrorMode
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
SetUnhandledExceptionFilter
SetFilePointer
SetEnvironmentVariableA
IsBadWritePtr
HeapReAlloc
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
HeapAlloc
HeapFree
GetVersion
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GlobalUnlock
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalFree
GetModuleFileNameA
GetCurrentProcess
CreateThread
CloseHandle
ReadProcessMemory
IsBadReadPtr
user32
GetWindowThreadProcessId
wsprintfA
UnhookWindowsHookEx
PostMessageA
GetWindowTextA
EnumWindows
GetMessageA
PostThreadMessageA
GetInputState
ClipCursor
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetOpenW
InternetOpenUrlW
ws2_32
inet_ntoa
getpeername
advapi32
OpenProcessToken
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegCloseKey
RegEnumValueA
LookupPrivilegeValueA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ