Static task
static1
Behavioral task
behavioral1
Sample
3a2221dee80fb5e6cf87f6aa4b3e70294d071f74f944b0e67941b030713f0df5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a2221dee80fb5e6cf87f6aa4b3e70294d071f74f944b0e67941b030713f0df5.dll
Resource
win10v2004-20221111-en
General
-
Target
3a2221dee80fb5e6cf87f6aa4b3e70294d071f74f944b0e67941b030713f0df5
-
Size
21KB
-
MD5
8ce68e0246f038d94f15cfc6006b8f40
-
SHA1
b3596ee893d5c7fa98de68de97b2b5a96a1cef14
-
SHA256
3a2221dee80fb5e6cf87f6aa4b3e70294d071f74f944b0e67941b030713f0df5
-
SHA512
35afee41dc583ebcd8bf367466a92f27297a24ac8d9ef862984e23e03a82dbca941ba52743b7ad058d856163ac0c96a995b2ee8f855782af2aae31b611218995
-
SSDEEP
384:zugvfxml40Ia9nHYPKg4gRKHBqvMcV5y9VTCxKTfrMA6:iuo60II4P4jH4ry9VTlTfrMA6
Malware Config
Signatures
Files
-
3a2221dee80fb5e6cf87f6aa4b3e70294d071f74f944b0e67941b030713f0df5.dll windows x86
b63c0ae4c7c1a2b32bf22da216b56c93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateThread
WaitForMultipleObjects
lstrcatA
CreateMailslotA
GetModuleFileNameA
GetLastError
DisableThreadLibraryCalls
WaitForSingleObject
GetVersionExA
lstrcpyA
ReadFile
GetSystemDirectoryA
CreateDirectoryA
GetTickCount
GetTempFileNameA
GetFileAttributesA
DeleteFileA
lstrlenA
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
SetFilePointer
ReleaseMutex
SetEndOfFile
CreateEventA
CreateMutexA
CreateThread
lstrcmpA
ResetEvent
CompareStringA
Sleep
OpenProcess
CreateFileA
WriteFile
CloseHandle
SetEvent
user32
wsprintfA
advapi32
CryptDecrypt
RegQueryValueExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegNotifyChangeKeyValue
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
CryptDeriveKey
CryptHashData
OpenProcessToken
CreateProcessAsUserA
CryptCreateHash
CryptAcquireContextA
RegCreateKeyExA
wininet
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
InternetConnectA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ