ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1771e65d627c2646b20beeb24a54b4a82c7528edd6bd3f067e0cd6b68054c4cd.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1771e65d627c2646b20beeb24a54b4a82c7528edd6bd3f067e0cd6b68054c4cd.dll
Resource
win10v2004-20221111-en
General
-
Target
1771e65d627c2646b20beeb24a54b4a82c7528edd6bd3f067e0cd6b68054c4cd
-
Size
30KB
-
MD5
5e3b909e4844f2ed069778f282b9f770
-
SHA1
7b719a21715a5913d11231d3f83345a6fb77ef6b
-
SHA256
1771e65d627c2646b20beeb24a54b4a82c7528edd6bd3f067e0cd6b68054c4cd
-
SHA512
c126ec13f35aac81f6ab4d508edf79388d3795a58c819dde7fb3c5bcb978d318513155fa5c08ecf7920462a1c8e9c251a2d434e8a44b2a9d1bd1ca302cb207df
-
SSDEEP
192:zgSQzCLnYFpm6IGhohRf5lNB2Jyw3px9zHJEW2mRHqtzWwyk:zrQWrGyGKhR9B03LAW2mRKtzuk
Malware Config
Signatures
Files
-
1771e65d627c2646b20beeb24a54b4a82c7528edd6bd3f067e0cd6b68054c4cd.dll windows x86
c5f3aae820364f2ab99475ada83cb6aa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileA
CloseHandle
CreateThread
ExitProcess
ReadFile
SetFilePointer
GetModuleFileNameA
SetLastError
FreeConsole
Sleep
DeleteFileA
lstrlenA
lstrcmpA
GetProcAddress
lstrcpyA
FreeLibrary
LoadLibraryA
user32
wsprintfA
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerA
wininet
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
ws2_32
WSAStartup
msvcrt
??2@YAPAXI@Z
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
wcstombs
??3@YAXPAX@Z
__CxxFrameHandler
atoi
strchr
strncpy
_CxxThrowException
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 690B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ