Static task
static1
Behavioral task
behavioral1
Sample
f4beb5cb33130d71c844e302981372e8fdf6ab02c2a1a52d722ffdc8ce600165.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f4beb5cb33130d71c844e302981372e8fdf6ab02c2a1a52d722ffdc8ce600165.dll
Resource
win10v2004-20221111-en
General
-
Target
f4beb5cb33130d71c844e302981372e8fdf6ab02c2a1a52d722ffdc8ce600165
-
Size
53KB
-
MD5
06e4af9601c7790bb0f53036aa4d8ddd
-
SHA1
368f653ff4fd78878ee0682d7e7eb517e38ef9e4
-
SHA256
f4beb5cb33130d71c844e302981372e8fdf6ab02c2a1a52d722ffdc8ce600165
-
SHA512
ff302bdb5c674c0aa21044d47466c56a736d755890348a0a3075fbea61b0eecac0ee9a45fdf1b0457f6b0d7ee11979a2d69f7e6874e32675cc3d048af3cd9ee7
-
SSDEEP
1536:uuffgf3riFgwV2Az+3JrZTwcMhb10uqMkA58lYV/n:vngf3rimG6tZrMhbNgY5
Malware Config
Signatures
Files
-
f4beb5cb33130d71c844e302981372e8fdf6ab02c2a1a52d722ffdc8ce600165.dll windows x86
f565edd9f20e0a52a01ad6b114db70cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
DisableThreadLibraryCalls
lstrcpynA
lstrcpyA
DeviceIoControl
OutputDebugStringA
LocalFree
GetModuleFileNameA
lstrcatA
SystemTimeToFileTime
DebugBreak
FormatMessageA
GetLastError
GetSystemTime
GetLocalTime
VirtualProtect
advapi32
RegCreateKeyExA
RegCloseKey
msvcrt
_snprintf
_vsnprintf
__dllonexit
_onexit
_adjust_fdiv
malloc
_initterm
free
_mbscmp
strrchr
sprintf
srand
rand
time
_except_handler3
msvcp60
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ