Static task
static1
Behavioral task
behavioral1
Sample
becca9c83d8b9b140fae9ae451f4b896980a67cbc61fe3b353953b8a6ea5e21d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
becca9c83d8b9b140fae9ae451f4b896980a67cbc61fe3b353953b8a6ea5e21d.dll
Resource
win10v2004-20220901-en
General
-
Target
becca9c83d8b9b140fae9ae451f4b896980a67cbc61fe3b353953b8a6ea5e21d
-
Size
27KB
-
MD5
83b5d791bfd76b99319423758a685343
-
SHA1
806d2bfec3cd81c7629980bfaf7d013badc928f8
-
SHA256
becca9c83d8b9b140fae9ae451f4b896980a67cbc61fe3b353953b8a6ea5e21d
-
SHA512
7efe03cd5ce3f346870b12d9baa020abc8c1b2bb8e4fc55676d090a81284afa3831c89a3d31a2a54094c1e3345878d457a1025d26e3e7327dfaf9167b993a589
-
SSDEEP
192:y5Dx2Cy96zAMPzc3Dn1rvev62gAnP9zHJHJrhTfpbG:y5D0CQrGzcZ7LAnPdrhTf0
Malware Config
Signatures
Files
-
becca9c83d8b9b140fae9ae451f4b896980a67cbc61fe3b353953b8a6ea5e21d.dll windows x86
67eb64534fa9700b366d59eba3e1370c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
DisableThreadLibraryCalls
lstrcmpA
ExitProcess
WaitForSingleObject
CreateEventA
DeleteFileA
ReadFile
SetFilePointer
FreeLibrary
GetCurrentProcessId
lstrcpyA
Sleep
DeviceIoControl
LoadLibraryA
CreateThread
GetProcAddress
user32
wsprintfA
CharUpperA
advapi32
ControlService
StartServiceA
CreateServiceA
CloseServiceHandle
DeleteService
OpenSCManagerA
OpenServiceA
wininet
InternetReadFile
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
ws2_32
inet_ntoa
gethostbyname
inet_addr
msvcrt
memset
_adjust_fdiv
malloc
_initterm
free
memcpy
strchr
_EH_prolog
__CxxFrameHandler
??2@YAPAXI@Z
strrchr
??3@YAXPAX@Z
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 510B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ