Static task
static1
Behavioral task
behavioral1
Sample
8c49325e7eb0ad72fcb9fd522cb83b17f73cf8808ae1c025d8b51414109ef39b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8c49325e7eb0ad72fcb9fd522cb83b17f73cf8808ae1c025d8b51414109ef39b.dll
Resource
win10v2004-20220901-en
General
-
Target
8c49325e7eb0ad72fcb9fd522cb83b17f73cf8808ae1c025d8b51414109ef39b
-
Size
51KB
-
MD5
cacc87a2669a1de4dbabbf5d32c9c958
-
SHA1
9fea05b31f1caf4257214295b9717175b64f2f7b
-
SHA256
8c49325e7eb0ad72fcb9fd522cb83b17f73cf8808ae1c025d8b51414109ef39b
-
SHA512
418ecda12d934c7137cd9fa3eae3f30cb94421c10a7d50959bd65356d15032ac3bfd54119dac93e6f46dd547132b4757af709611bcd7cf3ee0f9c9cf299015b4
-
SSDEEP
1536:JdEbLLbLabejxv+NJRJMjExLvv2s0A+gzVO3FeMFa23s:J6bLuNnMjEIs0A+S28M028
Malware Config
Signatures
Files
-
8c49325e7eb0ad72fcb9fd522cb83b17f73cf8808ae1c025d8b51414109ef39b.dll windows x86
de6d860f1ec4159811b58c1aa3aa4621
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
ReadFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
LoadLibraryA
HeapReAlloc
HeapFree
HeapAlloc
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetProcessHeap
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetModuleFileNameA
GetFullPathNameA
GetFileSize
FindNextFileA
FindFirstFileA
FindClose
FindAtomA
ExitThread
DeleteAtom
CreateThread
CreateFileA
CloseHandle
WideCharToMultiByte
AddAtomA
advapi32
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegCloseKey
CryptReleaseContext
CryptHashData
CryptDestroyKey
CryptDestroyHash
CryptDeriveKey
CryptDecrypt
CryptCreateHash
CryptAcquireContextW
user32
CharUpperA
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ