ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
353f151eb70c4ec1338e66fa4e2d94ec521c6c71afd27d3aa68c19f1adfa0263.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
353f151eb70c4ec1338e66fa4e2d94ec521c6c71afd27d3aa68c19f1adfa0263.dll
Resource
win10v2004-20220812-en
General
-
Target
353f151eb70c4ec1338e66fa4e2d94ec521c6c71afd27d3aa68c19f1adfa0263
-
Size
167KB
-
MD5
fadce8ab994363905f1da2ceed1c8470
-
SHA1
7232ecfeb47e492e4406b309de078671ce076db8
-
SHA256
353f151eb70c4ec1338e66fa4e2d94ec521c6c71afd27d3aa68c19f1adfa0263
-
SHA512
43552cd1c5acda1ab3ccd8343486472e882f57ab7d949d2dea8be776666ae84ac82b915c76731a201ec5a2b9db21d8d5ebafaab19329cf6c6783b3b3c85f51b2
-
SSDEEP
3072:iVFzV2RqdUiRcUv1E5/r2IzWXsjIOf59fXQ1I5GRW+j:i4WH64vuTfkvr
Malware Config
Signatures
Files
-
353f151eb70c4ec1338e66fa4e2d94ec521c6c71afd27d3aa68c19f1adfa0263.dll windows x86
cb9306991f88cc29462810ba76a3497b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
DeleteFileA
WideCharToMultiByte
GetFileSize
SetEndOfFile
SetFilePointer
WriteFile
GetExitCodeProcess
TerminateProcess
GlobalAlloc
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
CopyFileA
MoveFileExA
MoveFileA
CreateDirectoryA
RemoveDirectoryA
ReadFile
GetVolumeInformationA
LoadLibraryA
GetProcAddress
GetCurrentDirectoryA
GetVersionExA
GetWindowsDirectoryA
FreeLibrary
SystemTimeToFileTime
GetTempFileNameA
SizeofResource
LockResource
GetLastError
FindResourceA
FindResourceExA
GetLogicalDrives
GetDriveTypeA
GetModuleFileNameA
MultiByteToWideChar
CreateEventA
GetLocalTime
WaitForSingleObject
CreateThread
Sleep
CloseHandle
SetFileTime
GetFileTime
CreateFileA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetConsoleMode
GetConsoleCP
RtlUnwind
VirtualAlloc
LoadResource
GetSystemDirectoryA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetCommandLineA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
advapi32
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
shlwapi
PathFileExistsA
StrStrIA
PathIsDirectoryA
ws2_32
WSACleanup
WSAStartup
recv
send
setsockopt
__WSAFDIsSet
shutdown
select
connect
inet_addr
htons
ioctlsocket
closesocket
WSAGetLastError
socket
gethostname
inet_ntoa
getsockopt
gethostbyname
rpcrt4
UuidFromStringA
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ