BootDll
Static task
static1
Behavioral task
behavioral1
Sample
10e33e208d6d48b0a1e789f42413cb4648e393a251e956888234f9082f9b368e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10e33e208d6d48b0a1e789f42413cb4648e393a251e956888234f9082f9b368e.dll
Resource
win10v2004-20221111-en
General
-
Target
10e33e208d6d48b0a1e789f42413cb4648e393a251e956888234f9082f9b368e
-
Size
412KB
-
MD5
6ff61a9a41226aa9299e3ac39aab1e6a
-
SHA1
2de702c9b0cd58ba5970fa2a4deda5bcfbd8241e
-
SHA256
10e33e208d6d48b0a1e789f42413cb4648e393a251e956888234f9082f9b368e
-
SHA512
d050ca93187ed949aad9a31a1c03b5fdafc032526aab94ea65d6c525c766acf7111b6451b113eab0e3bfe76a84dc0ab4faa5a1c85a64046c4076e724de46e8a2
-
SSDEEP
6144:T18SOrbI/PKChCwuvWHXlFTkUU6Uuc7E3P4s0NdRc:T1HOr8/PKCt8alRtH/ERc
Malware Config
Signatures
Files
-
10e33e208d6d48b0a1e789f42413cb4648e393a251e956888234f9082f9b368e.dll windows x86
0d93bc29dcc7f4266900eef8a46852f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
EnterCriticalSection
GetCurrentThreadId
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
ResetEvent
InitializeCriticalSection
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
CloseHandle
Sleep
MapViewOfFile
CreateFileMappingA
CreateFileA
UnmapViewOfFile
ResumeThread
PurgeComm
ClearCommError
SetCommState
GetCommState
SetCommMask
SetCommTimeouts
SetupComm
GetCommProperties
GetCommMask
GetLastError
WaitForMultipleObjects
WaitCommEvent
SetThreadPriority
GetOverlappedResult
ReadFile
WriteFile
HeapDestroy
GetVersionExA
SetEnvironmentVariableA
CreateThread
TlsSetValue
ExitThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetFullPathNameA
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
LeaveCriticalSection
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCurrentDirectoryA
GetModuleFileNameA
GetEnvironmentVariableA
CompareStringW
FreeEnvironmentStringsA
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
RaiseException
SetEndOfFile
CompareStringA
user32
SendMessageA
MessageBeep
Exports
Exports
Sections
.text Size: 276KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ