RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
228fbee71740aeb6a560d87181a192dbaff48fa162027c0a9d389245c21079a1.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
228fbee71740aeb6a560d87181a192dbaff48fa162027c0a9d389245c21079a1.dll
Resource
win10v2004-20221111-en
General
-
Target
228fbee71740aeb6a560d87181a192dbaff48fa162027c0a9d389245c21079a1
-
Size
160KB
-
MD5
58c8ba7891cd1f3487a04d1392cb4370
-
SHA1
6fa741e4f5752e5b91c656e677dbe12761d028ab
-
SHA256
228fbee71740aeb6a560d87181a192dbaff48fa162027c0a9d389245c21079a1
-
SHA512
48237264db377b796a74f0de33ad0060f271b93ed794796403c51563ac931d7cab00ec940088b748d77290b143fc8b59b699527f1b167ba0c78261fc13e8256f
-
SSDEEP
3072:+LoL2a2M7iHhlamvst/c4FZUQ5wX333Yp33333333333333333333/vUQdBkNMO+:B2aKawst/7AacdKlT
Malware Config
Signatures
Files
-
228fbee71740aeb6a560d87181a192dbaff48fa162027c0a9d389245c21079a1.dll windows x86
2f9eff751ce6c1481a06f535f1279d5d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pncrt
vsprintf
strncpy
strrchr
_stricmp
sprintf
strtol
strchr
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
realloc
free
_vsnprintf
_ftol
_initterm
_adjust_fdiv
__dllonexit
_onexit
malloc
_ftime
_strcmpi
ole32
CoCreateGuid
kernel32
DisableThreadLibraryCalls
GetTickCount
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE