YIYUANGLAMOXIANG
Static task
static1
Behavioral task
behavioral1
Sample
c15e3206dcf4a9a139213eba6cf09345996cd4bc2a5e5047181a28d0e68451ad.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c15e3206dcf4a9a139213eba6cf09345996cd4bc2a5e5047181a28d0e68451ad.dll
Resource
win10v2004-20220812-en
General
-
Target
c15e3206dcf4a9a139213eba6cf09345996cd4bc2a5e5047181a28d0e68451ad
-
Size
2.9MB
-
MD5
8eda1e42337dcc786ef13fb767958fb1
-
SHA1
88e1c82c112ef518b3275012168a306f1ea68e6a
-
SHA256
c15e3206dcf4a9a139213eba6cf09345996cd4bc2a5e5047181a28d0e68451ad
-
SHA512
b42060a2b7f38724faf3e15d3f71afc0953761f3479e5878254b705af4fce9bd1ebf571e09ffa1951810d6abf87b345faf096da18ab70821afce23114ae32fbd
-
SSDEEP
49152:6v58kbgWUf0Sqim/RIRLpd4Cpq4GQua7h9a7Vzlp5m0o10PKyf0GUcP:yVgHXm/ORLv4uqgumC7dlpU0dyDRcP
Malware Config
Signatures
Files
-
c15e3206dcf4a9a139213eba6cf09345996cd4bc2a5e5047181a28d0e68451ad.dll windows x86
19317fc7f0b8de244b8024e68f6da50e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
user32
WaitForInputIdle
gdi32
LineTo
winmm
midiStreamRestart
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
OleInitialize
oleaut32
RegisterTypeLi
comctl32
ImageList_GetIcon
ws2_32
closesocket
comdlg32
ChooseColorA
msvcrt
malloc
iphlpapi
GetAdaptersInfo
psapi
GetMappedFileNameW
Exports
Exports
Sections
.text Size: 916KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ