ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
b95d682baacd9ed4ddc51cf233c1b7b62a90f144999ada3a0aebb5ca7f1c6b1c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b95d682baacd9ed4ddc51cf233c1b7b62a90f144999ada3a0aebb5ca7f1c6b1c.dll
Resource
win10v2004-20220901-en
General
-
Target
b95d682baacd9ed4ddc51cf233c1b7b62a90f144999ada3a0aebb5ca7f1c6b1c
-
Size
116KB
-
MD5
c0feb06868df72702c8170139807bab0
-
SHA1
b6428ab4f3ca645237fb7024e4adc885bc2f9d80
-
SHA256
b95d682baacd9ed4ddc51cf233c1b7b62a90f144999ada3a0aebb5ca7f1c6b1c
-
SHA512
1f05eb59998b105eb720df70e9e9fe4b92c20107f9e4ade4c5337200690b3700c183b39a1b635feac9e0c728cdf41412a6ea875351604a6dbd3467b3c4aac4b7
-
SSDEEP
1536:QfnP3Dff0QbYNfOT7GfgZA7toygBhblGG89KQcQWlfcmcnScJCx1jeu:Qfbxv89KQbWdcmcScJCx1je
Malware Config
Signatures
Files
-
b95d682baacd9ed4ddc51cf233c1b7b62a90f144999ada3a0aebb5ca7f1c6b1c.dll windows x86
844af05cc28d48b7fc01ce308c21126e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strncat
_errno
strchr
strncmp
atoi
strncpy
strcat
strcpy
_adjust_fdiv
strrchr
_except_handler3
malloc
free
_CxxThrowException
memcmp
??2@YAPAXI@Z
memset
__CxxFrameHandler
strstr
strlen
_ftol
_initterm
??1type_info@@UAE@XZ
calloc
_beginthreadex
wcstombs
strcmp
realloc
memcpy
memmove
ceil
_strnicmp
_strupr
_strcmpi
??3@YAXPAX@Z
kernel32
RaiseException
GetLastError
DeleteCriticalSection
LocalAlloc
FreeConsole
OutputDebugStringA
InterlockedExchange
lstrlenA
FreeLibrary
Sleep
ResetEvent
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
InitializeCriticalSection
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
Exports
Exports
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ