Static task
static1
Behavioral task
behavioral1
Sample
a2fa7d1b9f72176cb01158b449d729e8e61535515d2ed4bf2f4ac5577fbf93b7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2fa7d1b9f72176cb01158b449d729e8e61535515d2ed4bf2f4ac5577fbf93b7.dll
Resource
win10v2004-20220812-en
General
-
Target
a2fa7d1b9f72176cb01158b449d729e8e61535515d2ed4bf2f4ac5577fbf93b7
-
Size
28KB
-
MD5
d3a211c6bb27097fe1d0b53722fd624c
-
SHA1
9e4f5ea8f002677e95d4a9916d04ca8fe3762743
-
SHA256
a2fa7d1b9f72176cb01158b449d729e8e61535515d2ed4bf2f4ac5577fbf93b7
-
SHA512
f96f9f3009233ed1bb17a9ac1bd3da843545f9ccda6f357a9221b09d25ebaa3198b49bb773605f4ca8bec0a14e440980994f472bbf3c632e00b7f96b598c8961
-
SSDEEP
192:vyPcMPju4Mm7z370tifW/oE95n0xEVSZ1UvQic6Qvpct5UUDt3QwWenArWAcGNL:8u4Mm7f6iu/oE950KxE6Qvpct5JSyGN
Malware Config
Signatures
Files
-
a2fa7d1b9f72176cb01158b449d729e8e61535515d2ed4bf2f4ac5577fbf93b7.dll windows x86
17b1a1ee7b439e3c66de9a74ed5b15ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohs
ntohl
closesocket
msvcrt
malloc
_initterm
_strupr
free
atoi
memcpy
strcmp
fwrite
time
strrchr
fopen
fseek
ftell
??2@YAPAXI@Z
memset
fread
fclose
strstr
strchr
strncpy
??3@YAXPAX@Z
_strlwr
_itoa
_adjust_fdiv
kernel32
TerminateProcess
Sleep
lstrcmpA
WaitForSingleObject
SetEvent
GetModuleHandleA
CreateThread
LoadLibraryA
CopyFileA
GetProcAddress
GetTempPathA
WideCharToMultiByte
lstrcpyA
lstrlenA
ReadProcessMemory
lstrcatA
GetCurrentProcessId
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
GetModuleFileNameA
CreateEventA
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 946B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ