wqxrggsds
Static task
static1
Behavioral task
behavioral1
Sample
a20f777b4c0a3aec73e7624313e411c569f77e94abaef03278c3f5e54dc9637c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a20f777b4c0a3aec73e7624313e411c569f77e94abaef03278c3f5e54dc9637c.dll
Resource
win10v2004-20220812-en
General
-
Target
a20f777b4c0a3aec73e7624313e411c569f77e94abaef03278c3f5e54dc9637c
-
Size
92KB
-
MD5
8b9001ccced055e1531c25dd68d8c5a9
-
SHA1
4fb177f1bae0bfca338e6a4d58533a866a096139
-
SHA256
a20f777b4c0a3aec73e7624313e411c569f77e94abaef03278c3f5e54dc9637c
-
SHA512
733b6077eee56f7f54def7a4fe486ba64d52b34aa4148d96c4207088e4fb037c6dbcb83bc951d873d55c399a0a0a33f63e4e8e49518fc4abfcea1178bbd4206f
-
SSDEEP
1536:HoF5IVPNdVv40cAHg9i2OmTsRzM4gC4O8uwcBUCHXMOqT62ENfi:IF5aFw0cAHg93Om4Rz7DHcOL2Exi
Malware Config
Signatures
Files
-
a20f777b4c0a3aec73e7624313e411c569f77e94abaef03278c3f5e54dc9637c.dll windows x86
5732a7281bee18ec9c738faf63744436
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
ReadEventLogW
ImpersonateSelf
OpenThreadToken
OpenProcessToken
CloseEventLog
CheckTokenMembership
LookupPrivilegeValueW
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupAccountNameW
RevertToSelf
LookupAccountSidW
OpenEventLogW
LookupAccountSidA
EqualSid
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ