RInit2
Static task
static1
Behavioral task
behavioral1
Sample
aaea2267ead6f356992f20aa7a2451011fd30d89715ee1fde7ff72191f7493db.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aaea2267ead6f356992f20aa7a2451011fd30d89715ee1fde7ff72191f7493db.dll
Resource
win10v2004-20221111-en
General
-
Target
aaea2267ead6f356992f20aa7a2451011fd30d89715ee1fde7ff72191f7493db
-
Size
26KB
-
MD5
558ec05301902766c51740ed6cd4c37f
-
SHA1
3860631d04ae5502284145ca619f0ce1c56442f0
-
SHA256
aaea2267ead6f356992f20aa7a2451011fd30d89715ee1fde7ff72191f7493db
-
SHA512
cf6d304121f07f87bd8379c8134e46a513cfb5f0dd8ffd91da62bd41c69124a9b3d279328bdefc5d99ecc1a0db8f241f6388fd7fb7c4f04a7a900d9f20c60359
-
SSDEEP
768:QCh0fPQIkdmqSsktpognQ98LmLlSkohYJbxi8tfUopAeyq:V0fPQIkdmqSsktpognQ98LmUsJ/lAe
Malware Config
Signatures
Files
-
aaea2267ead6f356992f20aa7a2451011fd30d89715ee1fde7ff72191f7493db.dll windows x86
5b5f6206fc045ea5a7faf31feee63efc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
inet_addr
gethostbyname
kernel32
lstrcatA
lstrlenA
GetTempPathA
lstrcmpiA
lstrcpyA
lstrcpynA
GlobalFree
GlobalAlloc
lstrcmpA
DeleteFileA
GetTempFileNameA
FindClose
FindFirstFileA
UnmapViewOfFile
CreateEventA
CreateFileMappingA
CreateFileA
LoadLibraryA
GetLastError
RtlUnwind
FindNextFileA
MoveFileA
Sleep
CreateThread
GetModuleFileNameA
VirtualQuery
FreeLibrary
SetEvent
ExitProcess
OpenEventA
WaitForSingleObject
CloseHandle
GetModuleHandleA
GetProcAddress
MapViewOfFile
GetTickCount
user32
SendMessageA
EnumWindows
GetWindowThreadProcessId
PostMessageA
CharLowerA
wsprintfA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
Exports
Exports
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ