sp_cc_proc
Static task
static1
Behavioral task
behavioral1
Sample
a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a.dll
Resource
win10v2004-20220812-en
General
-
Target
b341abd91eb346a73924e6ad440cc357ca79a8515ee2ca4a0691cebb7f456b70
-
Size
5KB
-
MD5
d102bdad06b27616babe442e14461059
-
SHA1
801ef1829949cdeed83d4352b9355a8d6fe80f75
-
SHA256
b341abd91eb346a73924e6ad440cc357ca79a8515ee2ca4a0691cebb7f456b70
-
SHA512
df58ad780f4329cc81e889567b095cdbe13fc7de8081327b1fb07d5dd69720c4dfc148f51b6ce32749b21b75c37f59da1b33da4a7c9dac4982cb982543d6408b
-
SSDEEP
96:5qryLCnBh+tTmfDaz5FklF4mAFxl8sA6+DKG//ed1ZS1eq5UgbOB7rJa:EqCBh+luuk4xG6+RWRS8q55bYJa
Malware Config
Signatures
Files
-
b341abd91eb346a73924e6ad440cc357ca79a8515ee2ca4a0691cebb7f456b70.cab
-
a.dll windows x86
523c60ed7c81b4838e95c3e764720daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetFileSize
SetErrorMode
FreeLibrary
HeapAlloc
GetTickCount
VirtualFree
GetProcessHeap
GetVersionExW
lstrcpynW
ReadFile
GetModuleFileNameW
CreateFileW
lstrlenW
GetProcAddress
VirtualAlloc
DisableThreadLibraryCalls
CloseHandle
DeleteFileW
lstrcpyW
CreateThread
GetCurrentThreadId
GetModuleHandleW
VirtualProtect
GetCurrentProcess
user32
wsprintfW
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ