xlknkkdrf
Static task
static1
Behavioral task
behavioral1
Sample
d78a1bc52de85a51d31a9eba16798350c0fe35ac1b710358f3b708b150a3770b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d78a1bc52de85a51d31a9eba16798350c0fe35ac1b710358f3b708b150a3770b.dll
Resource
win10v2004-20221111-en
General
-
Target
d78a1bc52de85a51d31a9eba16798350c0fe35ac1b710358f3b708b150a3770b
-
Size
253KB
-
MD5
7fd9879f4d5caa6d140ffe87ab73c386
-
SHA1
00b7561c625fdeacd22d6d9b28515acfd533581f
-
SHA256
d78a1bc52de85a51d31a9eba16798350c0fe35ac1b710358f3b708b150a3770b
-
SHA512
fd0216c65b3fccb0370d3d5c306e6a040e28770e732fb9b9153d620a0dfe29d9c904bc3615a8e15bfcd65f2ff436e12d1208a474cc5d005c36cf9848f0beadeb
-
SSDEEP
3072:8EUoKU94TvhBCoQI/L33LAQLCl1xgeNJZM5kDWUfz9bM2UEJJudXanp+:8Ef2vhjQq73L8gUZcWz9b9Dudqp
Malware Config
Signatures
Files
-
d78a1bc52de85a51d31a9eba16798350c0fe35ac1b710358f3b708b150a3770b.dll windows x64
307cf37f358d1e2ecf67018ce8c3712a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shlwapi
PathGetDriveNumberA
PathFileExistsA
PathAppendA
kernel32
GetStartupInfoA
SetHandleCount
GetModuleFileNameA
HeapAlloc
GetLastError
TlsSetValue
TlsFree
SetLastError
LCMapStringA
GetOEMCP
SetUnhandledExceptionFilter
SetFilePointer
lstrcmpW
GetCurrentProcessId
GetLocalTime
Sleep
CreateFileA
LCMapStringW
HeapFree
GetStringTypeW
TlsAlloc
GetStdHandle
RaiseException
TerminateProcess
GetCurrentThreadId
GetFileType
GetCurrentProcess
VirtualAlloc
CreateFileW
LeaveCriticalSection
VerSetConditionMask
GetCommandLineW
EnterCriticalSection
UnhandledExceptionFilter
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
ConvertStringSidToSidA
Exports
Exports
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdata Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ