IeGetClass
Static task
static1
Behavioral task
behavioral1
Sample
d15afb22e029819e2f8a25081f094ca898800fdfbd2dc4d0fae616437eb623ab.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d15afb22e029819e2f8a25081f094ca898800fdfbd2dc4d0fae616437eb623ab.dll
Resource
win10v2004-20221111-en
General
-
Target
d15afb22e029819e2f8a25081f094ca898800fdfbd2dc4d0fae616437eb623ab
-
Size
20KB
-
MD5
39a78504f72ec6bbd1a7ecb69ef83f43
-
SHA1
07e520f6852cec55fca731bd4c04a3504c2dc357
-
SHA256
d15afb22e029819e2f8a25081f094ca898800fdfbd2dc4d0fae616437eb623ab
-
SHA512
7ea9319ba9d83467c293ae118376128a45cfe050f4bc7e79f498c513394f27a65b9bbe3446daee5e47d681483016f6755303dc8c39c5b0e5f7399552084f7156
-
SSDEEP
384:ctsKW+98fK2IudB33QPVrLPaxCwwE8AlvsQDjd7mA:nKrZUFAtOxCG8A5sKjd7m
Malware Config
Signatures
Files
-
d15afb22e029819e2f8a25081f094ca898800fdfbd2dc4d0fae616437eb623ab.dll windows x86
be72312724c5e321f6369e847650033f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
CreateProcessA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
TerminateProcess
WriteFile
CreateFileA
DeleteFileA
Sleep
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
LoadLibraryA
GetTickCount
ReadFile
GetFileSize
WinExec
TerminateThread
WaitForSingleObject
CreateThread
LeaveCriticalSection
EnterCriticalSection
SetEndOfFile
FlushFileBuffers
SetFilePointer
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
FreeLibrary
GetComputerNameA
GetLastError
advapi32
GetTokenInformation
LookupAccountSidA
OpenProcessToken
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SafeArrayUnaccessData
SysFreeString
SysAllocString
SafeArrayAccessData
SafeArrayCreateVector
VariantInit
VariantClear
wininet
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
DeleteUrlCacheEntry
msvcrt
rand
_stricmp
_adjust_fdiv
_initterm
__CxxFrameHandler
malloc
free
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
srand
_strnicmp
ws2_32
WSAStartup
WSACleanup
Exports
Exports
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ