Static task
static1
Behavioral task
behavioral1
Sample
726c1b3b09402afc4d94fc424416e49d5d29461531baecd4d8d8c7eec67bfd89.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
726c1b3b09402afc4d94fc424416e49d5d29461531baecd4d8d8c7eec67bfd89.dll
Resource
win10v2004-20220812-en
General
-
Target
726c1b3b09402afc4d94fc424416e49d5d29461531baecd4d8d8c7eec67bfd89
-
Size
21KB
-
MD5
7c69243c21fec3bf9131a93b3068d530
-
SHA1
25c3879c042e913bca9f7e0de6a2c94e0d5fd064
-
SHA256
726c1b3b09402afc4d94fc424416e49d5d29461531baecd4d8d8c7eec67bfd89
-
SHA512
5fa0239d52ece7a6f4e87f837d2261b49aa628b08eca77b7cea6582d2313e82f051d4290e3d6ce8c4718bce481684376e6ea094c0c4bf16c8b40a696f137de97
-
SSDEEP
384:Qrc9icRW38C7E6rIVexsFM94ZWvVub/eV5MxhCITN17:F9c38C7E6kisC+ZcVuTerMxhhTN17
Malware Config
Signatures
Files
-
726c1b3b09402afc4d94fc424416e49d5d29461531baecd4d8d8c7eec67bfd89.dll windows x86
2608ad2942ac258691484073ec427db9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
GetVersionExA
ExitThread
TerminateThread
WaitForMultipleObjects
GetModuleFileNameA
GetLastError
ReadFile
CreateMailslotA
CloseHandle
WriteFile
WaitForSingleObject
lstrcatA
CreateThread
CreateFileA
HeapReAlloc
HeapAlloc
GetProcessHeap
OpenProcess
lstrcpyA
HeapFree
lstrlenA
SetFilePointer
CreateMutexA
ReleaseMutex
SetEndOfFile
CreateEventA
lstrcmpA
ResetEvent
CompareStringA
GetSystemDirectoryA
CreateDirectoryA
GetTickCount
GetTempFileNameA
GetFileAttributesA
DeleteFileA
user32
wsprintfA
advapi32
OpenProcessToken
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptDecrypt
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegNotifyChangeKeyValue
CreateProcessAsUserA
wininet
HttpOpenRequestA
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
HttpSendRequestA
InternetConnectA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ