atol
Static task
static1
Behavioral task
behavioral1
Sample
92662855382bc2b66ceb37439da85cdac05c399f8e3f90bff68752d3b6f7756a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
92662855382bc2b66ceb37439da85cdac05c399f8e3f90bff68752d3b6f7756a.dll
Resource
win10v2004-20221111-en
General
-
Target
92662855382bc2b66ceb37439da85cdac05c399f8e3f90bff68752d3b6f7756a
-
Size
36KB
-
MD5
f3b88193bd990182c4c29338cd4ab9b4
-
SHA1
1e94e8e4a0456d83b3a0849defe7bc77295855d5
-
SHA256
92662855382bc2b66ceb37439da85cdac05c399f8e3f90bff68752d3b6f7756a
-
SHA512
30086f1556c4161b459907715a1d2064103fa7b4f641b57b0888e5af9a983e4d399c8ddf196aa1de90dc5403cc42e3e8d272219d071be8a8a000b6d9436001c0
-
SSDEEP
384:i8jHDVaaMLc7KYLK8ClaaR2qj7von8dR1ac0hqIwPq4qF47Lx+sr4S59IPIfrR:hjHDVgL7TJV/wAoqIwPt/7Lx+sr4Afl
Malware Config
Signatures
Files
-
92662855382bc2b66ceb37439da85cdac05c399f8e3f90bff68752d3b6f7756a.dll windows x86
7bf1ca5c8a348207ce9a2d489209f4f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsW
Process32NextW
Process32FirstW
LoadLibraryA
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
GetDriveTypeW
WriteFile
SetFilePointer
GetFileSize
CreateProcessW
PeekNamedPipe
TerminateProcess
LocalFree
LocalAlloc
ExpandEnvironmentStringsW
FreeLibrary
MultiByteToWideChar
GetSystemDirectoryW
CreateFileW
GetFileTime
SetFileTime
GetModuleFileNameA
ReadFile
DeleteFileA
GetModuleFileNameW
HeapFree
HeapAlloc
Sleep
CreateFileA
ExpandEnvironmentStringsA
OutputDebugStringA
GetLastError
CloseHandle
GetVersionExW
LoadLibraryW
GetStartupInfoW
GetProcAddress
advapi32
GetUserNameW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExA
RegCreateKeyA
GetSidSubAuthority
GetSidSubAuthorityCount
RegEnumKeyW
RegQueryValueExA
RegCloseKey
LookupAccountNameW
GetSidIdentifierAuthority
crypt32
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertFindChainInStore
CertCloseStore
CertFreeCertificateContext
CertFindCertificateInStore
CertGetCertificateChain
CertOpenSystemStoreW
netapi32
NetApiBufferFree
NetUserGetLocalGroups
psapi
GetModuleFileNameExW
EnumProcessModules
ws2_32
connect
closesocket
send
htons
WSACleanup
WSAStartup
gethostbyname
inet_ntoa
ntohs
socket
WSAGetLastError
setsockopt
recv
msvcrt
_stricmp
_adjust_fdiv
malloc
_initterm
free
strstr
memmove
_itoa
_wtoi
isspace
isdigit
_wfopen
fread
sscanf
fclose
fwrite
swprintf
wcscat
wcslen
__CxxFrameHandler
sprintf
wcscpy
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ