Memcwoybt
Static task
static1
Behavioral task
behavioral1
Sample
b532fd0a5310515c8f5caa51887fcdb7a853264466c0b638147377fdfd7c9782.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b532fd0a5310515c8f5caa51887fcdb7a853264466c0b638147377fdfd7c9782.dll
Resource
win10v2004-20220812-en
General
-
Target
b532fd0a5310515c8f5caa51887fcdb7a853264466c0b638147377fdfd7c9782
-
Size
92KB
-
MD5
0ac927243d25956400b0ce71502d0d00
-
SHA1
341ab2e6b2594ce455cc38a696fa1b408f312944
-
SHA256
b532fd0a5310515c8f5caa51887fcdb7a853264466c0b638147377fdfd7c9782
-
SHA512
c2f07beb1fbcec4c3c84287704e9982abbab71510302c6d0713f91e87200e25e884312f672060dee5df672abb964b3f346628e043031c68baf94797ff88b8a9e
-
SSDEEP
1536:3vWW3rzFq/94bPlX0jPqdxnuD1j9ACXIaj4cP01Ttc8aFpsTDxRwqopf2qb:fW6BEcEzMmnGabs1fDxRwqg
Malware Config
Signatures
Files
-
b532fd0a5310515c8f5caa51887fcdb7a853264466c0b638147377fdfd7c9782.dll windows x86
754ecfa63b1515a46ddba09d96eddffa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mixerGetLineControlsA
mciGetDeviceIDA
waveOutRestart
midiOutLongMsg
mciGetCreatorTask
waveInGetID
midiStreamClose
midiInOpen
waveInAddBuffer
mmioSeek
mixerGetControlDetailsA
midiOutUnprepareHeader
waveOutUnprepareHeader
mmioOpenA
mixerGetID
midiStreamOut
midiOutSetVolume
timeGetDevCaps
kernel32
GetSystemTime
IsValidLocale
GetVersion
GetModuleHandleA
GetProcAddress
GetHandleInformation
LoadLibraryA
VirtualAlloc
version
GetFileVersionInfoSizeA
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
winspool.drv
DeletePortA
msvcrt
fread
memset
fclose
sprintf
ftell
printf
fopen
fseek
free
_unlink
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
fwrite
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ