omio
Static task
static1
Behavioral task
behavioral1
Sample
a9499d0a9a9a30c60d0d98ee456de763b31440f8077e6033fcf7fd35de5de040.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9499d0a9a9a30c60d0d98ee456de763b31440f8077e6033fcf7fd35de5de040.dll
Resource
win10v2004-20220901-en
General
-
Target
a9499d0a9a9a30c60d0d98ee456de763b31440f8077e6033fcf7fd35de5de040
-
Size
160KB
-
MD5
b1eb7b6a20d7f48be69f33f3274dc175
-
SHA1
0724bf6e936a488c4853a152642475f383df8bb9
-
SHA256
a9499d0a9a9a30c60d0d98ee456de763b31440f8077e6033fcf7fd35de5de040
-
SHA512
bc64dee4866e5fcab7236ccf12eba813b0725881adb1061a77b554c29dab3c0d589acbe91dca8b601a471874889f571f1828b9e8adf1edf427a4fb6cabb0ff42
-
SSDEEP
3072:n90jeNygAPaaoSUC2yWl+qPKp9A7l0dOhmKKNYs+jiDjGQebf4MIM:n90KCP4NyWgJAR1hmKKF+j6P+35
Malware Config
Signatures
Files
-
a9499d0a9a9a30c60d0d98ee456de763b31440f8077e6033fcf7fd35de5de040.dll windows x86
fd196f4c68394952c74856e0c35cf9f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
CompareStringA
lstrlenA
lstrcmpA
GetVersionExA
GetModuleFileNameA
GetProcessHeap
SetFileAttributesA
MoveFileA
GetSystemTimeAsFileTime
GetFileTime
GetTempPathA
CloseHandle
GetFileSize
LocalFree
FormatMessageA
GetLastError
CreateFileA
InterlockedExchange
Sleep
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
HeapFree
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MapViewOfFile
MultiByteToWideChar
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
GetVersionExW
SetLastError
LoadResource
FindResourceExW
LoadLibraryExW
FreeLibrary
CreateFileMappingW
CreateFileW
GetLocaleInfoW
GetTickCount
HeapAlloc
ole32
CoUninitialize
CoCreateInstance
CoInitialize
user32
MessageBoxA
LoadStringA
advapi32
IsValidAcl
msvcrt
wcslen
malloc
fclose
memcpy
free
wcsncmp
memset
Exports
Exports
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ