hroqkajty
Static task
static1
Behavioral task
behavioral1
Sample
c5ee936ba3a118ab0c5a6e53fd47167142ccdab7f070d02b9905b640380eea46.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5ee936ba3a118ab0c5a6e53fd47167142ccdab7f070d02b9905b640380eea46.dll
Resource
win10v2004-20220812-en
General
-
Target
c5ee936ba3a118ab0c5a6e53fd47167142ccdab7f070d02b9905b640380eea46
-
Size
88KB
-
MD5
e4a77fbae7e2689f6739bfdfdc2294a6
-
SHA1
de11b53ba9de53cf9d331d45d9f1cd993ec1085e
-
SHA256
c5ee936ba3a118ab0c5a6e53fd47167142ccdab7f070d02b9905b640380eea46
-
SHA512
dcf3088741b4c6f98f7449f836a2c760de15ac2daf634f91301b28d6d8f6cc95c9bd6d4b4830512aa99b5bbe7e3fb2dde1e836dd3bf0520c57727897062d4221
-
SSDEEP
1536:5IuCKBpSV7L6CGhgZs0EoQKvlfSrEqEokhuuCWGlkm:ifa4JL6b90mclfSYBob
Malware Config
Signatures
Files
-
c5ee936ba3a118ab0c5a6e53fd47167142ccdab7f070d02b9905b640380eea46.dll windows x86
da089da26bc7231a49daffaaacbcf2e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetErrorMode
FindFirstFileExA
SetFileAttributesA
GetFileSize
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
GetFullPathNameA
Sleep
ReadFile
GetModuleHandleA
SetEndOfFile
OpenProcess
GetProcessHeap
GetTickCount
HeapAlloc
DeleteFileA
GetTempPathA
GetFileInformationByHandle
CloseHandle
GetCurrentDirectoryA
GetPrivateProfileSectionA
FindNextFileA
GetPrivateProfileStringA
FindClose
GetTempFileNameA
CopyFileA
RemoveDirectoryA
FindFirstFileA
SetCurrentDirectoryA
GetFileAttributesA
WriteFile
ExpandEnvironmentStringsA
GetFileAttributesExA
GetCurrentProcess
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
OutputDebugStringA
HeapFree
SetFilePointer
advapi32
EqualDomainSid
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
IsWellKnownSid
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ