ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a92f65c17a76ee1d8e7f09204fc1839d0c315b3303799365aed0e6c39f6f5848.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a92f65c17a76ee1d8e7f09204fc1839d0c315b3303799365aed0e6c39f6f5848.dll
Resource
win10v2004-20220812-en
General
-
Target
a92f65c17a76ee1d8e7f09204fc1839d0c315b3303799365aed0e6c39f6f5848
-
Size
93KB
-
MD5
fa2661a0521ccb1a7ac558a21b523589
-
SHA1
cbd170c6d0cc331bf0d8c61dec46257deb92e6db
-
SHA256
a92f65c17a76ee1d8e7f09204fc1839d0c315b3303799365aed0e6c39f6f5848
-
SHA512
169c82373a2db399fa3ac5baf13465d95c8bd0ba6b1928c461e154eb3cfea00c32c631c446065e5955acc8080607273b6626a6eeb0fcdf53622149c1164107c9
-
SSDEEP
1536:2vKQ6we+lf+FjyFVVm3JwxprECWY0/XBKV4WXC9X0Q9QRUQ2x:2vO5+lfAmbU3JurOYGXYyWS0kQRPY
Malware Config
Signatures
Files
-
a92f65c17a76ee1d8e7f09204fc1839d0c315b3303799365aed0e6c39f6f5848.dll windows x86
84bd75c34d6bbc52268fd55241c08b5f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
memmove
wcsrchr
??0exception@@QAE@ABV0@@Z
?what@exception@@UBEPBDXZ
_CxxThrowException
__CxxFrameHandler
wcslen
msvcp60
?nothrow@std@@3Unothrow_t@1@B
?copy@?$char_traits@G@std@@SAPAGPAGPBGI@Z
?_Xlen@std@@YAXXZ
?move@?$char_traits@G@std@@SAPAGPAGPBGI@Z
?_Xran@std@@YAXXZ
?_Doraise@bad_alloc@std@@MBEXXZ
??0bad_alloc@std@@QAE@ABV01@@Z
??_7bad_alloc@std@@6B@
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@PBD@Z
ntdll
RtlApplicationVerifierStop
kernel32
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetLastError
SetLastError
CloseHandle
FreeLibrary
WaitForSingleObject
LoadLibraryW
GetModuleHandleExW
SetEvent
GetProcAddress
CreateEventW
GetVersionExW
GetSystemInfo
HeapSize
InterlockedExchangeAdd
HeapDestroy
HeapCreate
HeapAlloc
HeapFree
DeleteTimerQueueEx
GetModuleFileNameW
advapi32
RegisterServiceCtrlHandlerExW
SetServiceStatus
TraceMessage
RegQueryValueExW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegCreateKeyExW
RegSetValueExW
RegCloseKey
ole32
CoWaitForMultipleHandles
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ