Static task
static1
Behavioral task
behavioral1
Sample
8f447e658fd8f6b09dece859e3511d98d98cc695f9d456dc12cd3413dc163bd4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f447e658fd8f6b09dece859e3511d98d98cc695f9d456dc12cd3413dc163bd4.dll
Resource
win10v2004-20221111-en
General
-
Target
8f447e658fd8f6b09dece859e3511d98d98cc695f9d456dc12cd3413dc163bd4
-
Size
143KB
-
MD5
3978a1e53a2508faa0f116d66ede42f0
-
SHA1
ab1c2039767828d0da767a639e13a82065fde559
-
SHA256
8f447e658fd8f6b09dece859e3511d98d98cc695f9d456dc12cd3413dc163bd4
-
SHA512
9b6f210aea42c35529ef2197a104eb9e1cf263422bee996cba3951ff69b0a0cc70f18f6ec35a72ac5880309ee93ad44f93bc0b8dd522a165ab57385839c3dd80
-
SSDEEP
3072:VN+tXY0Zdbp3+lidG22igpHg2c8uXsAV:VUtowaidUpHg2c8iV
Malware Config
Signatures
Files
-
8f447e658fd8f6b09dece859e3511d98d98cc695f9d456dc12cd3413dc163bd4.dll windows x86
e04272535558d885537e8a91127a6b53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
srand
strrchr
shlwapi
SHDeleteKeyA
ws2_32
freeaddrinfo
WSACleanup
getaddrinfo
WSAStartup
WSAAddressToStringA
kernel32
lstrcpyA
CreateToolhelp32Snapshot
GetModuleFileNameA
DeviceIoControl
MultiByteToWideChar
Sleep
GetProcAddress
GetModuleHandleA
CreateThread
CreateFileA
lstrlenA
WaitForSingleObject
OpenProcess
TerminateThread
ReadFile
lstrcmpiA
GetExitCodeThread
CloseHandle
GetSystemTime
DeleteFileA
LoadLibraryExA
FreeLibrary
Process32First
WriteFile
user32
SetProcessWindowStation
OpenDesktopA
wsprintfA
OpenWindowStationA
SetThreadDesktop
advapi32
RegCloseKey
OpenSCManagerA
RegOpenKeyExA
StartServiceA
CreateServiceA
RegSetValueExA
CloseServiceHandle
OpenProcessToken
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ