Static task
static1
Behavioral task
behavioral1
Sample
47feeb54a9c371f67aadf04d3172971aa75d188cac92fabf48de0bcbf67fe047.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47feeb54a9c371f67aadf04d3172971aa75d188cac92fabf48de0bcbf67fe047.dll
Resource
win10v2004-20220812-en
General
-
Target
47feeb54a9c371f67aadf04d3172971aa75d188cac92fabf48de0bcbf67fe047
-
Size
23KB
-
MD5
61f68a5bf652a61060720977d6467f50
-
SHA1
f2e1f83b7bfabf3d2d2109c997f8595a4827a841
-
SHA256
47feeb54a9c371f67aadf04d3172971aa75d188cac92fabf48de0bcbf67fe047
-
SHA512
3c12bcdf3ab9d09b341005c5f3415fcc8ff2df263f2bd81866e13e08a249ddcd40e644cffff3ff23a490f703aaa826bcc2eccc9c1881787bd34d9b2f5bec0a2c
-
SSDEEP
384:25vcNffHyv4bl9vSnqcpr8jzX2Gcs8H6VMhBFLHV5MEXMKJxT9RU1:25cfqv4bDvSqc9eU6VCB5HrME8KXT9RU
Malware Config
Signatures
Files
-
47feeb54a9c371f67aadf04d3172971aa75d188cac92fabf48de0bcbf67fe047.dll windows x86
5c6a2e577a935e67799c9f6fd817538c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetVersionExA
ExitThread
TerminateThread
WaitForMultipleObjects
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
ReadFile
CreateMailslotA
WaitForSingleObject
lstrcatA
CreateThread
GetSystemDirectoryA
CreateDirectoryA
DeleteFileA
GetTickCount
GetTempFileNameA
GetFileAttributesA
lstrlenA
HeapFree
OpenProcess
GetProcessHeap
lstrcmpiA
SetFilePointer
CreateMutexA
ReleaseMutex
SetEndOfFile
CreateEventA
lstrcmpA
ResetEvent
CompareStringA
CompareStringW
lstrlenW
lstrcpyA
HeapAlloc
HeapReAlloc
CreateFileA
WriteFile
CloseHandle
SetEvent
user32
wsprintfA
advapi32
RegNotifyChangeKeyValue
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegSetValueExA
OpenProcessToken
CreateProcessAsUserA
RegQueryValueExA
RegCreateKeyExA
CryptHashData
wininet
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetOpenA
InternetGetConnectedState
InternetCloseHandle
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ