ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
860cdce32826a0b6ad763600eb060dcc27b0455e0f196b4dfddc1e836a26fe8a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
860cdce32826a0b6ad763600eb060dcc27b0455e0f196b4dfddc1e836a26fe8a.dll
Resource
win10v2004-20220812-en
General
-
Target
860cdce32826a0b6ad763600eb060dcc27b0455e0f196b4dfddc1e836a26fe8a
-
Size
143KB
-
MD5
d0fe83d167f8d2c37477bb843b665bbc
-
SHA1
c6480caabff07f46d938afcfce1f2de1f47e74ff
-
SHA256
860cdce32826a0b6ad763600eb060dcc27b0455e0f196b4dfddc1e836a26fe8a
-
SHA512
4944f50ecaa84752766c601bc32c0e3239fd3f2bc6790b60b82556186d44178254de5a2a647285546a96c9c27ba957e43363f76bfa0899825359f17818bb376e
-
SSDEEP
3072:miUZ/zpr900NxyddOYb+gdF6FkwSQq1sgtZSFo4ofA+:0/zgOyrVb+gdcZS1btZSFoF4+
Malware Config
Signatures
Files
-
860cdce32826a0b6ad763600eb060dcc27b0455e0f196b4dfddc1e836a26fe8a.dll windows x86
3b4e6fbb3716da1304a8789cb3c8dfe1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CloseHandle
TerminateThread
WaitForSingleObject
SetEvent
ResumeThread
CreateThread
GetProcAddress
LoadLibraryA
VirtualFree
EnterCriticalSection
VirtualAlloc
ResetEvent
GetPrivateProfileSectionNamesA
FreeLibrary
lstrcmpA
GetPrivateProfileStringA
GetVersionExA
CreateProcessA
lstrcpyA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
LocalFree
FindFirstFileA
RemoveDirectoryA
GetFileSize
CreateFileA
WriteFile
MoveFileA
GetModuleFileNameA
GetCurrentProcess
CreateRemoteThread
VirtualAllocEx
LeaveCriticalSection
Sleep
DeleteCriticalSection
InitializeCriticalSection
MoveFileExA
GetLocalTime
MapViewOfFile
CreateFileMappingA
GetProcessHeap
UnmapViewOfFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetStartupInfoA
DisconnectNamedPipe
PeekNamedPipe
WaitForMultipleObjects
GetSystemInfo
ReleaseMutex
OpenEventA
SetErrorMode
CreateMutexA
SetUnhandledExceptionFilter
ExitProcess
GetFileAttributesA
OpenProcess
LocalReAlloc
LocalSize
GetCurrentThreadId
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
msvcrt
strstr
memcmp
strchr
malloc
strcpy
strcmp
free
_except_handler3
strrchr
strcat
strncpy
atoi
strlen
_errno
strncat
realloc
wcstombs
_beginthreadex
calloc
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_ftol
ceil
memmove
strncmp
__CxxFrameHandler
_strupr
_strnicmp
_strrev
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
_strcmpi
msvcp60
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
msvfw32
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICSeqCompressFrame
Exports
Exports
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Helpless Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ujyhkuy Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Helpless Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ