rcldqo
Static task
static1
Behavioral task
behavioral1
Sample
8b6c74471ed97d01c0b8aa465aa42ee8d3c72e0f828282f642894358d3b4199a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8b6c74471ed97d01c0b8aa465aa42ee8d3c72e0f828282f642894358d3b4199a.dll
Resource
win10v2004-20220812-en
General
-
Target
8b6c74471ed97d01c0b8aa465aa42ee8d3c72e0f828282f642894358d3b4199a
-
Size
98KB
-
MD5
c639b482e993a872e5e1b92dbda217cd
-
SHA1
f1a394f4a8cdc7c7990ba4c73b55877096e54d7f
-
SHA256
8b6c74471ed97d01c0b8aa465aa42ee8d3c72e0f828282f642894358d3b4199a
-
SHA512
e2679b2ff444aad0a94746d90ccc29636756ba86322b2769b5b0e9c946da80b1f23e71b8adc10ef9453b0e94fc2d6485eaea5b344bafa75dd6b3c0cfb62a3326
-
SSDEEP
1536:FzBr3Pt8f9awx2ywfeun9buXRAQkU/V+DE/kE9s9eo2FIZkGfDtj/3q22VBa:F9rSawxem89aXsUVmid9swo4IqGh622a
Malware Config
Signatures
Files
-
8b6c74471ed97d01c0b8aa465aa42ee8d3c72e0f828282f642894358d3b4199a.dll windows x86
c1022da150cf25c28e650c78740f0be1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
QueryPerformanceCounter
GetLocaleInfoA
GetModuleFileNameA
SetEvent
InterlockedExchange
GetEnvironmentStrings
WideCharToMultiByte
InitializeCriticalSection
GetFileType
IsBadReadPtr
GetACP
DisconnectNamedPipe
DeleteCriticalSection
RtlUnwind
ConnectNamedPipe
GetStartupInfoA
GetCPInfo
GetSystemTimeAsFileTime
TerminateProcess
HeapFree
IsBadCodePtr
GetStdHandle
SetLastError
CreateTimerQueueTimer
LCMapStringA
VirtualProtect
GetEnvironmentStringsW
ResetEvent
CreateEventA
GetOEMCP
lstrcpyW
SetUnhandledExceptionFilter
CreateMutexW
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsBadWritePtr
GetSystemInfo
LoadLibraryA
DeleteTimerQueueTimer
GetCurrentProcessId
WaitForSingleObject
CreateThread
UnmapViewOfFile
WriteFile
InterlockedDecrement
GetCurrentThreadId
HeapAlloc
LCMapStringW
CreateNamedPipeA
InterlockedCompareExchange
DuplicateHandle
WaitForMultipleObjects
FreeEnvironmentStringsA
LeaveCriticalSection
GetLastError
ReleaseMutex
GetModuleHandleA
OpenProcess
GetVersionExA
Sleep
GetTickCount
lstrcatW
MultiByteToWideChar
CopyFileA
EnterCriticalSection
VirtualQuery
InterlockedExchangeAdd
user32
DrawIcon
CreateIconFromResource
wsprintfW
LoadIconA
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
Exports
Exports
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ