Static task
static1
Behavioral task
behavioral1
Sample
cadd7eb2ad2d126ced762a43d92c7b087d1025b416df235a21041ff3f7c99e64.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cadd7eb2ad2d126ced762a43d92c7b087d1025b416df235a21041ff3f7c99e64.dll
Resource
win10v2004-20221111-en
General
-
Target
cadd7eb2ad2d126ced762a43d92c7b087d1025b416df235a21041ff3f7c99e64
-
Size
23KB
-
MD5
72b6ffee88c157866b7845360955aae3
-
SHA1
5fa55d0dbff400752ca903a496d761bab87f625d
-
SHA256
cadd7eb2ad2d126ced762a43d92c7b087d1025b416df235a21041ff3f7c99e64
-
SHA512
aebd8010b53b94cf9f6285bb61725c1d513b8503559b009622ef51ffe36e5d5dde0bf04d8e7e06617cdb2e44357561a8658f76476e3d260f0a7477049c84424d
-
SSDEEP
384:Gj91jJVo+PSGb7UD+rtCY16TGqSiYLZcnkvLc7Qag7Od+qypt3gC:S1rosbXsuk9XKSkDUQag6C
Malware Config
Signatures
Files
-
cadd7eb2ad2d126ced762a43d92c7b087d1025b416df235a21041ff3f7c99e64.dll windows x86
c5044803e87474d7be847bfbdec22c19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileAttributesW
ReadProcessMemory
VirtualQueryEx
WideCharToMultiByte
ReadFile
GetFileSize
CreateFileA
lstrcatA
lstrcpynA
lstrlenA
SetFilePointer
HeapAlloc
GetProcessHeap
OutputDebugStringA
GetModuleFileNameA
GetTempPathA
GetCurrentProcessId
OpenProcess
TerminateProcess
GetCurrentProcess
GetPrivateProfileStringA
LoadLibraryA
IsBadReadPtr
Sleep
GetModuleHandleA
GetProcAddress
CreateThread
user32
wsprintfA
GetWindow
GetClassNameW
wininet
InternetCloseHandle
msvcrt
memset
malloc
strcat
sprintf
strlen
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
mbstowcs
isprint
strstr
strcmp
strrchr
strncpy
_except_handler3
wcslen
wcsncat
wcscpy
wcsstr
exit
printf
memcpy
_local_unwind2
_stricmp
_vsnprintf
free
_strupr
_strcmpi
strcpy
gdiplus
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDisposeImage
GdipSaveImageToFile
GdiplusStartup
GdipCreateBitmapFromHBITMAP
gdi32
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
CreateCompatibleDC
GetDeviceCaps
CreateDCA
DeleteDC
iphlpapi
GetAdaptersInfo
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ