?AgentMain@@YGHXZ
Static task
static1
Behavioral task
behavioral1
Sample
8af3195ae4a761dc341d3956ce4db3ca897016386c17a18aec9990ad2ead4708.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8af3195ae4a761dc341d3956ce4db3ca897016386c17a18aec9990ad2ead4708.dll
Resource
win10v2004-20220812-en
General
-
Target
8af3195ae4a761dc341d3956ce4db3ca897016386c17a18aec9990ad2ead4708
-
Size
76KB
-
MD5
ff6430f147b9cbd9bfd5939521eae748
-
SHA1
25480e0775a443ac70fab7a8057e2d70713d9d8b
-
SHA256
8af3195ae4a761dc341d3956ce4db3ca897016386c17a18aec9990ad2ead4708
-
SHA512
318362409c0f16b1f0c22cef1c196fd59df37718bc117054f9931ed28a3586672aaf81f68653c652e64ba0c6d9b7196a62882911331221756cd8d8766b6aff31
-
SSDEEP
1536:UyPWt0kOU1j5ymgoUFSnXBZFpPiyQQUMcp76R3BeQyDH/++5TBCd:UyPWtus56SnXrQw4DH/LrG
Malware Config
Signatures
Files
-
8af3195ae4a761dc341d3956ce4db3ca897016386c17a18aec9990ad2ead4708.dll windows x86
280093672dffc4bcd30023b6009353bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
IsBadReadPtr
LoadLibraryA
detoured
Detoured
msvcp60
??_7out_of_range@std@@6B@
msvcrt
atoi
ws2_32
send
Exports
Exports
Sections
wbhmniv Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jkqmhjj Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xtguglc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tbfazyw Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iiutxch Size: 6KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dtwajcp Size: 6KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
odkcejy Size: 6KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eqrdlab Size: 7KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fxrkxah Size: 6KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE