SetProxy
Static task
static1
Behavioral task
behavioral1
Sample
b9eedb993e5f805b522b02ec3e317db122d2c476fe19b3efb2e0773f0c6ffc88.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b9eedb993e5f805b522b02ec3e317db122d2c476fe19b3efb2e0773f0c6ffc88.dll
Resource
win10v2004-20220901-en
General
-
Target
b9eedb993e5f805b522b02ec3e317db122d2c476fe19b3efb2e0773f0c6ffc88
-
Size
143KB
-
MD5
e0943aae0d8e6e044d896e0f8e6e3643
-
SHA1
d70e6453c57ae6d8e44059e218ebe5926e828281
-
SHA256
b9eedb993e5f805b522b02ec3e317db122d2c476fe19b3efb2e0773f0c6ffc88
-
SHA512
2d8f041c63599d44e9d7be0f684b97a2de2f47475b88182415e1e0c54b19e0ebb3713ae049732522f3c7bfada0c31f5424c42f512116e9685c2a9ebc8765cf97
-
SSDEEP
1536:hqiulUP8cXHhfchO9K7rZ8o6AvMz84wRNlqMm227:hqiulHMmb7re7CMzyuHL7
Malware Config
Signatures
Files
-
b9eedb993e5f805b522b02ec3e317db122d2c476fe19b3efb2e0773f0c6ffc88.dll windows x86
bb1b69a13ce6202d7729c615ff58fb80
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_amsg_exit
_initterm
free
malloc
_XcptFilter
_vsnprintf
cmutil
CmStrCatAllocA
CmStrCpyAllocA
WzToSzWithAlloc
CmMalloc
CmFree
CmStrrchrA
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
DisableThreadLibraryCalls
GetPrivateProfileStringA
lstrcmpiA
LoadLibraryA
FreeLibrary
GetProcAddress
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
GetLastError
CompareStringA
user32
CharNextA
Exports
Exports
Sections
.text Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ