RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
0f538756d21c669be0b8d8dc922bc76788060cff18a665ad6a5321c67951fe40.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f538756d21c669be0b8d8dc922bc76788060cff18a665ad6a5321c67951fe40.dll
Resource
win10v2004-20220812-en
General
-
Target
0f538756d21c669be0b8d8dc922bc76788060cff18a665ad6a5321c67951fe40
-
Size
200KB
-
MD5
ad7cc4256668126bf917577cc59c6190
-
SHA1
660eb98abaad3760058c9017c97c52800b6c0da3
-
SHA256
0f538756d21c669be0b8d8dc922bc76788060cff18a665ad6a5321c67951fe40
-
SHA512
74a90e09599ef469c481af8f967da7fc66b1fc60b9c7516786559bf6115854668ef93b6ef724650a772fbf00900c22dea0462738aa6e1d20099ef9288c9c887a
-
SSDEEP
3072:rLoL2a2M7iHhlamvst/c4FZp1mAVBEqVeFYhfA1rxTp47iQ21ejVlm:Q2aKawst/Z1mAjE/FYhfA3u7i310Vc
Malware Config
Signatures
Files
-
0f538756d21c669be0b8d8dc922bc76788060cff18a665ad6a5321c67951fe40.dll windows x86
2f9eff751ce6c1481a06f535f1279d5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pncrt
vsprintf
strncpy
strrchr
_stricmp
sprintf
strtol
strchr
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
realloc
free
_vsnprintf
_ftol
_initterm
_adjust_fdiv
__dllonexit
_onexit
malloc
_ftime
_strcmpi
ole32
CoCreateGuid
kernel32
DisableThreadLibraryCalls
GetTickCount
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE