Static task
static1
Behavioral task
behavioral1
Sample
9b71cb75172cb8945909e4cde4e8e937e7176d9bd95d3c515e23dd1bc40b3696.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b71cb75172cb8945909e4cde4e8e937e7176d9bd95d3c515e23dd1bc40b3696.dll
Resource
win10v2004-20220812-en
General
-
Target
9b71cb75172cb8945909e4cde4e8e937e7176d9bd95d3c515e23dd1bc40b3696
-
Size
7KB
-
MD5
cab50ac4e5ca4ce047b3432a2c6192f0
-
SHA1
d8f090974046cd870748e246a63e2389c60bbc63
-
SHA256
9b71cb75172cb8945909e4cde4e8e937e7176d9bd95d3c515e23dd1bc40b3696
-
SHA512
8ffc7e4209fcf07c46e95bc4615e9bf32d7f4a631a646e28a7e5fb4c7324c0309b8c82685a7b067cc454d1ab3a272614161a76c250738d092d8b61da79a5ed23
-
SSDEEP
96:eQGiVnlT+cwazAIVI1nmLbEIjc5ikVlLkVLucw3DhDPyJz2AFp+VDzrM1ECnIxZn:eQNTsNI+jkpucw3DZBAa5WxI706ptB
Malware Config
Signatures
Files
-
9b71cb75172cb8945909e4cde4e8e937e7176d9bd95d3c515e23dd1bc40b3696.dll windows x86
17b1c8d50b732bf269363bd2277d1f4a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlImageNtHeader
atol
strchr
ZwCreateEvent
_stricmp
_snprintf
sprintf
memcpy
kernel32
SetFileAttributesA
LoadLibraryA
GetLastError
InterlockedExchange
GetProcAddress
LocalAlloc
CreateThread
GetTempPathA
VirtualQuery
VirtualFree
GetVolumeInformationA
Sleep
VirtualAlloc
GetVersionExA
CreateFileA
GetLogicalDrives
WriteFile
CreateDirectoryA
CopyFileA
RaiseException
CloseHandle
MoveFileExA
FreeLibrary
GetTickCount
GetTempFileNameA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryExA
VirtualProtect
WinExec
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 302B - Virtual size: 450B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ