YITYZ
Static task
static1
Behavioral task
behavioral1
Sample
754deeb42728f28dddec23877e246b60d3574056adfb6f411cf6e12e3a3e6e58.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
754deeb42728f28dddec23877e246b60d3574056adfb6f411cf6e12e3a3e6e58.dll
Resource
win10v2004-20221111-en
General
-
Target
754deeb42728f28dddec23877e246b60d3574056adfb6f411cf6e12e3a3e6e58
-
Size
1008KB
-
MD5
72ad89513abc31ea78af48be9d3efbf7
-
SHA1
5f7d1bd7aa92da479826b1fb3bcea89525f47cb9
-
SHA256
754deeb42728f28dddec23877e246b60d3574056adfb6f411cf6e12e3a3e6e58
-
SHA512
4082f25566c5e26f5b8dbd84ada68c296c84f6f206b70a04e01426d6858401889ded1ecd372accd9fc39a738c43808931b72e7c0b69583328513b960c14ae8b0
-
SSDEEP
24576:tWuMGMlDviVye11hv5OCe9mXb4452xVUhpdeeTRdN:tWuMGMlQ911J5DeYrsVypdhTR
Malware Config
Signatures
Files
-
754deeb42728f28dddec23877e246b60d3574056adfb6f411cf6e12e3a3e6e58.dll windows x86
02efb971d1f8b1bf93f3a966e3a82a2b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
lstrlenA
GetProcAddress
user32
SendMessageA
msvcrt
_adjust_fdiv
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
strstr
rand
srand
time
free
_initterm
Exports
Exports
Sections
.YITYZ Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 547B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text0 Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 512KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ