ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
aca227bb93b485f180d02ca9bb8d257167bb9738e875abae3de762e42029a6ac.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aca227bb93b485f180d02ca9bb8d257167bb9738e875abae3de762e42029a6ac.dll
Resource
win10v2004-20220812-en
General
-
Target
aca227bb93b485f180d02ca9bb8d257167bb9738e875abae3de762e42029a6ac
-
Size
20KB
-
MD5
d462d55cf0f57b3d0802d7bd146af2af
-
SHA1
00e717a22c6ce7752a78fa1b4954fb6cefa956dd
-
SHA256
aca227bb93b485f180d02ca9bb8d257167bb9738e875abae3de762e42029a6ac
-
SHA512
0cc82469ccf830aa37377891181b4107f7fc0a4a2bf9b6b0468a88780d4df0b8fcfb9a12ab73b6800b911055420071e3ee65cb09e676b6298c5f26fd3e915f2a
-
SSDEEP
192:E/q2UORUFNfS9Zimg1vIsJyQVUr8uk4b9jp+Eg1SM4:Z27eFNGZih1A4Or8uks91+E0
Malware Config
Signatures
Files
-
aca227bb93b485f180d02ca9bb8d257167bb9738e875abae3de762e42029a6ac.dll windows x86
86dcdf2fa2fc0370af42706c17783a9f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetSystemInfo
VirtualFree
VirtualAlloc
IsBadReadPtr
GetLastError
ReadFile
CloseHandle
GetFileSize
CreateFileA
GetModuleFileNameA
Sleep
WaitForSingleObject
CreateThread
CreateMutexA
SetLastError
advapi32
SetServiceStatus
RegisterServiceCtrlHandlerA
msvcrt
free
malloc
memmove
_except_handler3
sprintf
_splitpath
wcstombs
strncpy
_local_unwind2
_initterm
_adjust_fdiv
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ