Static task
static1
Behavioral task
behavioral1
Sample
21b1ae20d1b7a67336a5d81d9750a80382e5c9a4c684aef67feec686d6fe92ef.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21b1ae20d1b7a67336a5d81d9750a80382e5c9a4c684aef67feec686d6fe92ef.dll
Resource
win10v2004-20221111-en
General
-
Target
21b1ae20d1b7a67336a5d81d9750a80382e5c9a4c684aef67feec686d6fe92ef
-
Size
17KB
-
MD5
c3738df5539efebf6664b5dc5327f390
-
SHA1
db4136cf159abb8c1db5fdfc93677c478283975b
-
SHA256
21b1ae20d1b7a67336a5d81d9750a80382e5c9a4c684aef67feec686d6fe92ef
-
SHA512
8fca71adce2b87523a46d1641650c4db6d76f9adae3880a482ae413f3cc064228a7856b62f52b263355e75a309499eeaaed38a1fea037777e624802d4c9fae9b
-
SSDEEP
384:9OCiGC+GoC37M6F0yWqYkD68PhR+zCru60vivJ:95iO27MUWXkvhR++ruXv+J
Malware Config
Signatures
Files
-
21b1ae20d1b7a67336a5d81d9750a80382e5c9a4c684aef67feec686d6fe92ef.dll windows x86
1ccf01171661d3d44c20c59be5524321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetTempPathA
GetLocalTime
GetCPInfoExA
GetACP
TerminateThread
CreateProcessA
CreateThread
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
CreateFileA
GetLastError
CloseHandle
GetSystemDirectoryA
DeleteFileA
Sleep
LoadLibraryA
SetThreadPriority
GetProcAddress
user32
GetCursor
GetDC
wininet
InternetReadFile
InternetOpenA
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
gdi32
GetPixel
GetBkMode
advapi32
OpenSCManagerA
DeleteService
CloseServiceHandle
ControlService
OpenServiceA
shell32
ShellExecuteExA
msvcrt
_except_handler3
memset
strcat
strcpy
sprintf
strrchr
strlen
memcpy
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ