Rfosyldr
Static task
static1
Behavioral task
behavioral1
Sample
c67698c92d700819d887b98d0f8665088372d8345597a2bb759eaa019e181d6e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c67698c92d700819d887b98d0f8665088372d8345597a2bb759eaa019e181d6e.dll
Resource
win10v2004-20220812-en
General
-
Target
c67698c92d700819d887b98d0f8665088372d8345597a2bb759eaa019e181d6e
-
Size
23KB
-
MD5
03b6f4c7d20dde316db761f5244d6b3a
-
SHA1
17a247ef17a41ac70238aec775eb233875639071
-
SHA256
c67698c92d700819d887b98d0f8665088372d8345597a2bb759eaa019e181d6e
-
SHA512
e00bd2bc49010a2d3f73c9bf522d402e3f5236d1959462ff58b945e4399a808696c85e0fff50e43eac5eafe3e32dc0b0af5eaad694acea38d4f5c58bb022ac7f
-
SSDEEP
384:o0OQUFDKeR5J1D63J/Rjz8vx9VzZZgP1RpU7UqAUld+C8G3Wjjtb2zbo7:mTqAN8ZU7UqAUjE
Malware Config
Signatures
Files
-
c67698c92d700819d887b98d0f8665088372d8345597a2bb759eaa019e181d6e.dll windows x86
ea863b472803973aa62e11fe5dc71d0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
SuspendThread
GetFileSizeEx
CreateConsoleScreenBuffer
SetConsoleScreenBufferSize
OpenProfileUserMapping
MoveFileA
GetCommandLineA
GetStartupInfoA
ExitProcess
ntdll
RtlZeroHeap
vsprintf
NtLockFile
strstr
NtReplaceKey
Exports
Exports
Sections
.edata Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WEIjunli Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ