DriverProc
Static task
static1
Behavioral task
behavioral1
Sample
1cdd705c5f3a68b9a3e8e2bd6a7c27b63cefbe7adfe2fde79be97f26cd773889.dll
Resource
win7-20220901-en
General
-
Target
1cdd705c5f3a68b9a3e8e2bd6a7c27b63cefbe7adfe2fde79be97f26cd773889
-
Size
147KB
-
MD5
4c9478fe3c95d04094a6064575a872d9
-
SHA1
282c601e69f4f36f5d5e6dab8464f3d84778ffb1
-
SHA256
1cdd705c5f3a68b9a3e8e2bd6a7c27b63cefbe7adfe2fde79be97f26cd773889
-
SHA512
1bb50fd6c41d22c47237867b0324e726954389ae8bb799e919252f3ebfc8d3abbe08a50e664b35e1605cc45a82f1b54ec7348f5274e893d0bf119e0256aa9bea
-
SSDEEP
3072:4il1+8KtoIJJK4pY6byqu1f9ZrJ+WrW/BPJTI:11dIJJKqZifngd/HTI
Malware Config
Signatures
Files
-
1cdd705c5f3a68b9a3e8e2bd6a7c27b63cefbe7adfe2fde79be97f26cd773889.dll windows x86
b412cb216ce8ac8b0aca751298ba24aa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
LocalAlloc
VirtualFree
GetFileType
GetStdHandle
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
GetStringTypeW
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
LocalFree
HeapFree
SetHandleCount
GetCPInfo
GetEnvironmentStringsW
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
user32
MessageBoxA
SetScrollRange
GetDlgItem
EndDialog
GetDlgCtrlID
GetScrollPos
SetScrollPos
wsprintfA
SetDlgItemTextA
winmm
DefDriverProc
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
Exports
Exports
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE