srzevwks
Static task
static1
Behavioral task
behavioral1
Sample
a920da5f8d2925e3f443080b41974457f6bb5081e435fbb4d4778a2aa3c8181e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a920da5f8d2925e3f443080b41974457f6bb5081e435fbb4d4778a2aa3c8181e.dll
Resource
win10v2004-20220812-en
General
-
Target
a920da5f8d2925e3f443080b41974457f6bb5081e435fbb4d4778a2aa3c8181e
-
Size
88KB
-
MD5
c9ac9653957d7f2e2cbfca9c0771ace3
-
SHA1
0fbb6aa1b3c0832de793d47d700e4920ebd6d8cb
-
SHA256
a920da5f8d2925e3f443080b41974457f6bb5081e435fbb4d4778a2aa3c8181e
-
SHA512
117760cd051ffd9e59f625fb59ce37e8d6a95ff798eea1d88fe08e3faa2103a6cce85ea47b770bcfdf4ef71a34d87778f679c10b0706016da8476043492cf91e
-
SSDEEP
1536:gpSQr0IAQUwPM1Zl4JFzlfDzpm6ZrNfIBiirnlVH/KtUti:gUQr0IJwZl4BfDzfZrNfsJx/UOi
Malware Config
Signatures
Files
-
a920da5f8d2925e3f443080b41974457f6bb5081e435fbb4d4778a2aa3c8181e.dll windows x86
a9547091a06a6a6ef52bf7ac2b9fd79a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameW
SetEndOfFile
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetCurrentProcess
DeleteFileW
GetSystemInfo
GetVersionExW
SetFilePointerEx
GetModuleHandleW
GetCurrentThread
GetDriveTypeW
FormatMessageW
GetProcAddress
CreateHardLinkW
GetModuleHandleA
GetVolumeInformationW
GetTimeFormatW
LocalFree
GetFileSizeEx
GetDateFormatW
CloseHandle
GetLastError
CreateFileW
DeviceIoControl
advapi32
LookupAccountSidA
OpenEventLogW
LookupAccountSidW
RevertToSelf
LookupAccountNameW
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupPrivilegeValueW
CheckTokenMembership
CloseEventLog
OpenProcessToken
OpenThreadToken
ImpersonateSelf
ReadEventLogW
EqualSid
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 538B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ