bsmkfqxut
Static task
static1
Behavioral task
behavioral1
Sample
82154d5737b9294d081eee7a4b693d3bf06df814ee5920f5219e5a00a60a69b2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82154d5737b9294d081eee7a4b693d3bf06df814ee5920f5219e5a00a60a69b2.dll
Resource
win10v2004-20220812-en
General
-
Target
82154d5737b9294d081eee7a4b693d3bf06df814ee5920f5219e5a00a60a69b2
-
Size
92KB
-
MD5
378c18f1a2d7e550e85ad7ba7ae423b2
-
SHA1
3aa63ae6e01746cea41a787a399585aaee6f93e3
-
SHA256
82154d5737b9294d081eee7a4b693d3bf06df814ee5920f5219e5a00a60a69b2
-
SHA512
8cc752c3d7b1486f2e86df4f468e3feb8cb7f3424c0a4434d7c05d11fa5b212d0051d79b562da8eae986ddea0d8471c56ac7cb25715649db75ec0a636e675552
-
SSDEEP
1536:6ocmR1tP8VASrnVh+RZdDZlU2M26QyII6rwXAyZPDimiYFPMKmPygSMTBhVc:X3RDUVAJRZBZl9M26Qyt6rwT7rm6gSMq
Malware Config
Signatures
Files
-
82154d5737b9294d081eee7a4b693d3bf06df814ee5920f5219e5a00a60a69b2.dll windows x86
2324d8fb235f249c435aefbf05343e4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetFullPathNameW
SetEndOfFile
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetModuleHandleW
DeleteFileW
GetSystemInfo
GetVersionExW
SetFilePointerEx
GetCurrentThread
GetDriveTypeW
FormatMessageW
GetProcAddress
CreateHardLinkW
GetModuleHandleA
GetVolumeInformationW
GetTimeFormatW
LocalFree
GetFileSizeEx
GetDateFormatW
CloseHandle
GetLastError
CreateFileW
DeviceIoControl
advapi32
OpenEventLogW
LookupAccountSidW
RevertToSelf
LookupAccountNameW
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupPrivilegeValueW
CheckTokenMembership
CloseEventLog
OpenProcessToken
OpenThreadToken
ImpersonateSelf
ReadEventLogW
LookupAccountSidA
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ