Static task
static1
Behavioral task
behavioral1
Sample
8198b28accc340d8070f548ce3e0c394bdf7623c0a12799c02c51ca8981cfaa9.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8198b28accc340d8070f548ce3e0c394bdf7623c0a12799c02c51ca8981cfaa9.dll
Resource
win10v2004-20221111-en
General
-
Target
8198b28accc340d8070f548ce3e0c394bdf7623c0a12799c02c51ca8981cfaa9
-
Size
32KB
-
MD5
dff481b2269f5b10d4b88c6c07c19086
-
SHA1
76dfe11804a6646bb8d7176b4f0b2c35d9f62485
-
SHA256
8198b28accc340d8070f548ce3e0c394bdf7623c0a12799c02c51ca8981cfaa9
-
SHA512
0a1b154b6b14a0a99341eba4fbdd80d1c9fb4bbc97b485e120ae134ef85e145ef5cb6277d9dbd59ac7a1856a39e1118e58eaab45edab4d3a129750587bad9c9f
-
SSDEEP
768:/L5vp3oh1tos8Eht4bLCMjQrbK/B4YIBBQARQkDVIv:z8m6K/mYIBBQARz
Malware Config
Signatures
Files
-
8198b28accc340d8070f548ce3e0c394bdf7623c0a12799c02c51ca8981cfaa9.dll windows x86
dcd1b9c2734abf59ee6ce30d6999ff8c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
closesocket
gethostname
ntdll
strchr
strstr
_snprintf
RtlZeroMemory
RtlUnwind
memcmp
memcpy
strlen
kernel32
CreateFileA
WriteFile
WideCharToMultiByte
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
ReadFile
MoveFileExA
MapViewOfFile
LoadLibraryA
GetTempPathA
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
InitializeCriticalSection
LeaveCriticalSection
Sleep
TerminateThread
WaitForSingleObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
lstrcpynA
GetTempFileNameA
CreateFileMappingA
CreateProcessA
DeleteFileA
GetExitCodeThread
GetFileSize
GetLastError
GetStartupInfoA
GetSystemDirectoryA
IsBadReadPtr
user32
wsprintfA
GetWindowThreadProcessId
KillTimer
RegisterWindowMessageA
SendMessageA
SetTimer
UnhookWindowsHookEx
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 12B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ