iTunesGLdsc
Static task
static1
Behavioral task
behavioral1
Sample
89ae02412e202731578368583f4b61a4e50fa1851378d21bbe24aa3aa2eb0a38.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89ae02412e202731578368583f4b61a4e50fa1851378d21bbe24aa3aa2eb0a38.dll
Resource
win10v2004-20221111-en
General
-
Target
89ae02412e202731578368583f4b61a4e50fa1851378d21bbe24aa3aa2eb0a38
-
Size
124KB
-
MD5
7f40640134e0c7ed1c15336e115e537c
-
SHA1
e75b9a36cb5a1bd19eb46998396c1de7d0adacb7
-
SHA256
89ae02412e202731578368583f4b61a4e50fa1851378d21bbe24aa3aa2eb0a38
-
SHA512
699ff5c89b2b516e3b4388688c00df4eb21e7d7d37ceb2491c0209942189ae15872a3d9703a070db16d5e6adc98252b64c1dffee0449ec62c5b1db0ca107aa27
-
SSDEEP
3072:Yuvyc/0Dll6S3R/dVwBEcnx7HFUGmeo2Xe1:Yux/j2/zIEcnx7lUGS2Xe1
Malware Config
Signatures
Files
-
89ae02412e202731578368583f4b61a4e50fa1851378d21bbe24aa3aa2eb0a38.dll windows x86
78de3fb333e37d1b1fc96c73e5d9a74d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
LocalFree
CreateDirectoryA
LeaveCriticalSection
WaitForSingleObject
GetModuleHandleA
HeapAlloc
GetCommandLineA
ExitProcess
UnmapViewOfFile
HeapFree
GetComputerNameA
GetProcessHeap
CreateEventA
GetVolumeInformationA
SetLastError
InterlockedDecrement
WriteFile
GetModuleFileNameA
GetCurrentProcessId
CreateMutexA
lstrlenA
LoadLibraryA
OpenEventA
CreateFileMappingA
lstrlenW
CreateProcessA
ReleaseMutex
CloseHandle
MapViewOfFile
GetTickCount
EnterCriticalSection
Sleep
InterlockedCompareExchange
GetLastError
GetProcAddress
CopyFileA
CreateFileA
ole32
OleCreate
CreateBindCtx
CoInitialize
OleSetContainedObject
CoUninitialize
CoTaskMemAlloc
CoCreateGuid
user32
RegisterWindowMessageA
DispatchMessageA
SetWindowsHookExA
GetParent
CreateWindowExA
FindWindowA
SetWindowLongA
GetSystemMetrics
DestroyWindow
PostQuitMessage
GetClassNameA
PostMessageA
SendMessageA
TranslateMessage
GetMessageA
KillTimer
SetTimer
GetWindowLongA
DefWindowProcA
GetWindowThreadProcessId
UnhookWindowsHookEx
oleaut32
SysAllocStringLen
SysAllocString
SysFreeString
shlwapi
StrStrIW
UrlUnescapeW
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
GetUserNameA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
shell32
SHGetFolderPathA
Exports
Exports
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ