RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
d8699112dcf0676c2cfe23ae01508f79d5f6f14acc482a4e22b4adbea3740b14.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8699112dcf0676c2cfe23ae01508f79d5f6f14acc482a4e22b4adbea3740b14.dll
Resource
win10v2004-20220901-en
General
-
Target
d8699112dcf0676c2cfe23ae01508f79d5f6f14acc482a4e22b4adbea3740b14
-
Size
164KB
-
MD5
40c644c02b1d3dc65eff05b072320d90
-
SHA1
49755de38827fe30881c881173a6308529b28cc4
-
SHA256
d8699112dcf0676c2cfe23ae01508f79d5f6f14acc482a4e22b4adbea3740b14
-
SHA512
1daa7a3f0fa001f7c52612f53bd7db79f90dc96d12a1d9316934d72cece24401c4b0331204e863a2df1b7a67e08077cd788df1b142aee03ae3eb33e800677fbc
-
SSDEEP
3072:uDc5dRB8VsQEF+b+KX9TUNxYhuJVeRSpJ8hhTVzci:UNrNT6QuLeAIzR
Malware Config
Signatures
Files
-
d8699112dcf0676c2cfe23ae01508f79d5f6f14acc482a4e22b4adbea3740b14.dll windows x86
7f165e20cd1f0a4661518efbce63d0b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pncrt
strrchr
strncpy
_stricmp
strncmp
atol
??3@YAXPAX@Z
_vsnprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
strchr
??2@YAPAXI@Z
_purecall
strtol
isdigit
realloc
_putenv
_strnicmp
_strcmpi
kernel32
DisableThreadLibraryCalls
user32
CharNextA
GetSystemMetrics
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE