rockmm
Static task
static1
Behavioral task
behavioral1
Sample
976d375f22a3b7eb20107b239263c497538ff8d16c8c3b72955f81d799399b42.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
976d375f22a3b7eb20107b239263c497538ff8d16c8c3b72955f81d799399b42.dll
Resource
win10v2004-20221111-en
General
-
Target
976d375f22a3b7eb20107b239263c497538ff8d16c8c3b72955f81d799399b42
-
Size
4KB
-
MD5
021acea3dd9747cc45045b559ed6e590
-
SHA1
685e2d3a0f87a33cccc18d599f4ddfbe2a29b91d
-
SHA256
976d375f22a3b7eb20107b239263c497538ff8d16c8c3b72955f81d799399b42
-
SHA512
d6468c77f49ca2f9dc7b78c7ce8ebfcda0c6f09053eb267d7f7844d34f417cd17a7666f5b4b7117c3b6afe49d3aff5bab0c39eea47e2d8519f2b9bc6be455915
-
SSDEEP
48:SvdR4F+dzb3ppWgJHp1Yy8SLu+UIf0FQoBaxuqLtbbUemmyH/8A09Ks:aR4O317KxSLs3FlkZbWTHEA09n
Malware Config
Signatures
Files
-
976d375f22a3b7eb20107b239263c497538ff8d16c8c3b72955f81d799399b42.dll windows x86
3d7bbab28aa403c3880fd135a75755d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
CreateProcessA
GetStartupInfoA
Sleep
WinExec
GetWindowsDirectoryA
GetTempPathA
GetPrivateProfileStringA
GetModuleFileNameA
user32
wsprintfA
shell32
SHGetSpecialFolderPathA
msvcrt
rename
strstr
free
_initterm
malloc
_adjust_fdiv
shlwapi
PathFileExistsA
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 174B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ