Static task
static1
Behavioral task
behavioral1
Sample
c984d74972c5cf8daa243bb6dd86924cc7d0103ce33005ce7d7d9bf1c9b1c37e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c984d74972c5cf8daa243bb6dd86924cc7d0103ce33005ce7d7d9bf1c9b1c37e.dll
Resource
win10v2004-20220812-en
General
-
Target
c984d74972c5cf8daa243bb6dd86924cc7d0103ce33005ce7d7d9bf1c9b1c37e
-
Size
72KB
-
MD5
94b9fb3b0770f16e2885751b86d31597
-
SHA1
929c20736906ead8213d9a1adf46451f376d91b9
-
SHA256
c984d74972c5cf8daa243bb6dd86924cc7d0103ce33005ce7d7d9bf1c9b1c37e
-
SHA512
47700396bd6f90cd98fb1729ee2ccf0ac33965fab1454fcf29a0efd1d33bd9e5bf9d664181511c1605371eac05e8e3fdf60d9765528916e52370f4b2e8ad20b1
-
SSDEEP
768:XEu2oWvR/3Ffc+02GD59m3xvCMi+8+9rf8MzzWTsnXfPrSilhjy6pi:XdtGdftpG9QgV+8+9T8MPWTk3GiPNi
Malware Config
Signatures
Files
-
c984d74972c5cf8daa243bb6dd86924cc7d0103ce33005ce7d7d9bf1c9b1c37e.dll windows x86
33f00f5d9b3a94261e93c1894e87a6f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalLock
GetCommandLineA
GetStartupInfoA
ExitProcess
ntdll
NtResetEvent
NtGetPlugPlayEvent
NtOpenSymbolicLinkObject
RtlxUnicodeStringToAnsiSize
RtlUpcaseUnicodeStringToCountedOemString
RtlCompactHeap
ZwCreateWaitablePort
ZwUnloadKey
NtQueryAttributesFile
NtNotifyChangeMultipleKeys
RtlSetSecurityObject
RtlAddAccessAllowedAceEx
isprint
NtCreateEventPair
ZwFlushVirtualMemory
RtlpNtSetValueKey
ZwQueryEaFile
Sections
.text Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
weIJUNLi Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ