_DllMain@12
Static task
static1
Behavioral task
behavioral1
Sample
7b82d7b44396f6650df67e224fde44447252cf6edcd81ea7ea877c436628e43d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7b82d7b44396f6650df67e224fde44447252cf6edcd81ea7ea877c436628e43d.dll
Resource
win10v2004-20221111-en
General
-
Target
7b82d7b44396f6650df67e224fde44447252cf6edcd81ea7ea877c436628e43d
-
Size
40KB
-
MD5
fdc485fe5a8f4c5726e5028bb6d4d270
-
SHA1
aab08ae485573777a291eae9a198c4a473ad2c6d
-
SHA256
7b82d7b44396f6650df67e224fde44447252cf6edcd81ea7ea877c436628e43d
-
SHA512
bbcda791aa630927e2fce71623cd8d3c052144c45ca116f3c64921b06173bf70bd2d3f74faf0b133dd718a35455998d8d1ed30935bccf55aec0b21812ba0066e
-
SSDEEP
384:nPGvkvimHGeNVqjmW2MFZMy6U4HmRwG/l9PW/WYXqmx:PGviigGeNnMMrmRWqq
Malware Config
Signatures
Files
-
7b82d7b44396f6650df67e224fde44447252cf6edcd81ea7ea877c436628e43d.dll windows x86
097237e9643064f8e0c4d99ae1ee8a1a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
msvcrt
fopen
fseek
ftell
fgetc
fread
fclose
memcpy
memset
strlen
sprintf
time
strstr
strcat
strcpy
kernel32
SetFileAttributesA
LocalAlloc
lstrcmpiA
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
CreateRemoteThread
GetVolumeInformationA
CopyFileA
GetComputerNameA
GetModuleFileNameA
Sleep
SetSystemTime
GetSystemTime
CloseHandle
GetFileSize
CreateFileA
DeleteFileA
WinExec
lstrcatA
GetSystemDirectoryA
CreateThread
lstrcpyA
lstrlenA
GetPrivateProfileStringA
GetPrivateProfileIntA
LoadLibraryA
Process32Next
Process32First
CreateToolhelp32Snapshot
WritePrivateProfileStringA
FreeLibrary
GetProcAddress
user32
wsprintfA
CharUpperA
advapi32
RegCloseKey
QueryServiceConfigA
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
ole32
CoCreateGuid
shlwapi
StrCmpNIA
PathFileExistsA
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ