Static task
static1
Behavioral task
behavioral1
Sample
55c66369dfad8e2ea4b7d6b19c9c928ac0ddaee536bbd6726eab172355751535.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
55c66369dfad8e2ea4b7d6b19c9c928ac0ddaee536bbd6726eab172355751535.dll
Resource
win10v2004-20220901-en
General
-
Target
55c66369dfad8e2ea4b7d6b19c9c928ac0ddaee536bbd6726eab172355751535
-
Size
136KB
-
MD5
dccd256d4b003042b6fc2c6b1b25b210
-
SHA1
45c201a0a39c62030e996fb303b3497d1c6b9af3
-
SHA256
55c66369dfad8e2ea4b7d6b19c9c928ac0ddaee536bbd6726eab172355751535
-
SHA512
d2c7cad4613085a8c188babe5446a766c3527e9c12bab9302f4cbbfab320af4d0da1f04c0ad5f1aefc783f50ae54189798ad7334b21070d58d44b4ab16494ba0
-
SSDEEP
3072:uoIE0QBOqv5bObgdDa0j6JBIufHNQIBgk9NmoKhiGhHxcD2c:gkBOqh+gdDa3GuvPjtKGh
Malware Config
Signatures
Files
-
55c66369dfad8e2ea4b7d6b19c9c928ac0ddaee536bbd6726eab172355751535.dll windows x86
6ee5c90ce75ad5827bbd89492070ca28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
netapi32
NetLocalGroupAddMembers
DsEnumerateDomainTrustsW
NetUserChangePassword
I_NetServerReqChallenge
NetUserModalsGet
NetAlertRaiseEx
NetUseGetInfo
NetShareEnum
NetWkstaGetInfo
NetStatisticsGet
NetGroupGetInfo
NetLocalGroupEnum
NetGroupDel
msvcrt
rand
wcsstr
iswprint
_wfreopen
isupper
_CIcos
_ismbcalpha
_timezone
toupper
longjmp
_mbsnextc
memcmp
_mbsupr
_ismbblead
__setusermatherr
user32
BeginPaint
CheckMenuItem
SetWindowsHookA
EmptyClipboard
SetWindowRgn
SendNotifyMessageW
SendMessageW
MonitorFromWindow
SetKeyboardState
PtInRect
msacm32
acmStreamUnprepareHeader
acmFormatSuggest
acmFormatDetailsW
acmDriverOpen
acmStreamPrepareHeader
acmFormatChooseW
acmStreamConvert
acmGetVersion
acmMetrics
acmFormatTagDetailsW
acmStreamSize
acmStreamOpen
acmDriverEnum
acmStreamClose
acmDriverClose
advapi32
LogonUserW
GetKernelObjectSecurity
RegRestoreKeyW
AddAccessAllowedAce
InitializeSecurityDescriptor
RegSetKeySecurity
LookupPrivilegeValueW
RegisterEventSourceW
ElfDeregisterEventSource
EnumServicesStatusW
kernel32
GetSystemTime
OutputDebugStringW
GetPrivateProfileSectionW
GetVersion
SetupComm
AddAtomA
GetWindowsDirectoryW
CreateRemoteThread
VirtualAlloc
CreateConsoleScreenBuffer
EnumDateFormatsExW
GetProcessTimes
SetVolumeLabelA
EnumResourceLanguagesW
SystemTimeToFileTime
QueryInformationJobObject
ReplaceFileW
ExpandEnvironmentStringsW
GetCalendarInfoW
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 19KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 16KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ