Static task
static1
Behavioral task
behavioral1
Sample
72efdffc29278d0ea1d812ba804fa4bd7200370ab5acef2521a5d91368e04b07.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
72efdffc29278d0ea1d812ba804fa4bd7200370ab5acef2521a5d91368e04b07.dll
Resource
win10v2004-20221111-en
General
-
Target
72efdffc29278d0ea1d812ba804fa4bd7200370ab5acef2521a5d91368e04b07
-
Size
155KB
-
MD5
6c06a2200ad3e9d1cfefd2fa49502ca9
-
SHA1
bf4aac7e64709e4e8cb38a610702a13a01803534
-
SHA256
72efdffc29278d0ea1d812ba804fa4bd7200370ab5acef2521a5d91368e04b07
-
SHA512
ce71d8f1bc19bcb30ca8325396a893cf8cbe6ac011866e613e2ae796979871df83c0468b797424185414ea4dd17b8ce05492ab77dc94e54f63e23ff957229291
-
SSDEEP
1536:+LcIfMI7IjkuvfZ/AuwdcLN3KybbUm8odCwPXkdrNYVWmCcno7GBTAcsqd1drob:+gfU8xvfGdo3KAFgdrNYVWfcPAsdro
Malware Config
Signatures
Files
-
72efdffc29278d0ea1d812ba804fa4bd7200370ab5acef2521a5d91368e04b07.dll windows x86
3310a81ad0e497966ac25984753b3a71
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
Sleep
OpenProcess
WideCharToMultiByte
GlobalUnlock
DeleteFileA
WriteFile
GetTempPathA
ReadFile
GetFileSize
CreateFileA
TerminateThread
CreateToolhelp32Snapshot
GetCurrentProcessId
SetThreadPriority
CreateEventA
OpenEventA
GetTickCount
OutputDebugStringA
GetCommandLineA
GetWindowsDirectoryA
GlobalAlloc
Process32First
GetVersionExA
GetLocalTime
CreateProcessA
MoveFileExA
GetSystemDirectoryA
GetCurrentThreadId
DeviceIoControl
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
MultiByteToWideChar
WriteProcessMemory
VirtualProtectEx
GetLastError
SetErrorMode
GlobalLock
GetModuleHandleA
LoadLibraryA
GetProcAddress
GlobalFree
GetModuleFileNameA
GetCurrentProcess
CreateThread
CloseHandle
ReadProcessMemory
ExitProcess
Process32Next
IsBadReadPtr
user32
GetWindowTextA
PostThreadMessageA
GetInputState
EnumWindows
GetMessageA
wsprintfA
GetWindowThreadProcessId
ClipCursor
PostMessageA
wininet
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
ws2_32
getpeername
inet_ntoa
advapi32
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegFlushKey
RegSetValueExA
RegCreateKeyExA
msvcrt
time
srand
atoi
__CxxFrameHandler
??3@YAXPAX@Z
wcscmp
wcslen
strchr
strstr
strrchr
sprintf
free
_initterm
malloc
_adjust_fdiv
_stricmp
_strlwr
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xpata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ