Static task
static1
Behavioral task
behavioral1
Sample
93b83c1371c87eb24a88ecf70ea29c8f963dce3af2d2672415f3033def152fd0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93b83c1371c87eb24a88ecf70ea29c8f963dce3af2d2672415f3033def152fd0.dll
Resource
win10v2004-20220812-en
General
-
Target
93b83c1371c87eb24a88ecf70ea29c8f963dce3af2d2672415f3033def152fd0
-
Size
15KB
-
MD5
993851737b5dc27553cd4fdf4e489948
-
SHA1
52371472d6d08c3b168088ab8b84de2f03bef990
-
SHA256
93b83c1371c87eb24a88ecf70ea29c8f963dce3af2d2672415f3033def152fd0
-
SHA512
8e38f3bc769f7070609935f9e0455fe5ae7723ac183fcf9b7fd91208d5345b16d1810f3da660048820dba5e844c31d915e20a8f98ad4382f78e9aec438b8a8f3
-
SSDEEP
384:mvKV+qXaV/EANILsAgneU8NNzi4doYWIjrWiZ:jGpNIIb8NNziCnJ
Malware Config
Signatures
Files
-
93b83c1371c87eb24a88ecf70ea29c8f963dce3af2d2672415f3033def152fd0.dll windows x86
0e75d060369525895ae7a3a8219856a1
Code Sign
6c:0e:ab:48:35:95:57:7a:b8:b5:54:be:d9:b9:5e:ddCertificate
IssuerCN=Root AgencyNot Before03/03/2010, 03:52Not After31/12/2039, 23:59SubjectCN=soft,OU=WWW.CeleWare.NET,O=CeleWare.NET,1.2.840.113549.1.9.1=#0c10736f667440686f746d61696c2e636f6dSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetLastError
GetSystemDirectoryA
lstrcatA
LoadLibraryA
VirtualAlloc
GlobalAlloc
CloseHandle
CreateThread
GetModuleFileNameA
lstrcmpiA
msvcrt
memcpy
strrchr
Exports
Exports
wdmAudio
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ