omsvqnn
Static task
static1
Behavioral task
behavioral1
Sample
dea7b6bb8c8ea51866c80f9286f2f9287a289ebe5f4111549fdcddb798a5ac56.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dea7b6bb8c8ea51866c80f9286f2f9287a289ebe5f4111549fdcddb798a5ac56.dll
Resource
win10v2004-20220812-en
General
-
Target
dea7b6bb8c8ea51866c80f9286f2f9287a289ebe5f4111549fdcddb798a5ac56
-
Size
556KB
-
MD5
cd03f66a81b103a1c6fb91459587cbca
-
SHA1
49876d7a6b79ce0337797c17ee043e3c5229598d
-
SHA256
dea7b6bb8c8ea51866c80f9286f2f9287a289ebe5f4111549fdcddb798a5ac56
-
SHA512
f886e29fd3c94e5f56bc752e98a4a6f22bf7427ca66147738ebe1dfd45a9793d07634c945b5ec1fb5d8e179df976d9c3d9706f3631854b2f4499d532120a8839
-
SSDEEP
12288:98mMmMxfHqRDUHQ+6gl7EJ8AV7HfHwZ/:ImT9UH7NsV7/H0
Malware Config
Signatures
Files
-
dea7b6bb8c8ea51866c80f9286f2f9287a289ebe5f4111549fdcddb798a5ac56.dll windows x86
8a9988add86692ffe91976134ca44c68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
lstrcmpA
GetCurrentThreadId
DeleteCriticalSection
GetCurrentProcessId
DisableThreadLibraryCalls
FreeEnvironmentStringsW
GetStdHandle
TlsFree
GetOEMCP
QueryPerformanceCounter
WideCharToMultiByte
LocalAlloc
LCMapStringA
VirtualFree
InterlockedIncrement
MapViewOfFile
LoadLibraryA
HeapReAlloc
GetDiskFreeSpaceA
VirtualProtect
GetFileType
CreateFileMappingW
EnterCriticalSection
CreateMutexW
UnmapViewOfFile
DeleteFileA
InterlockedExchange
GetSystemInfo
SetHandleCount
GetProcAddress
GetTickCount
DeleteFileW
GetVersionExA
CloseHandle
SetFilePointer
SetFileTime
TlsAlloc
IsDBCSLeadByte
WaitForSingleObject
Sleep
GetFullPathNameW
ReleaseMutex
SetLastError
CreateFileW
CompareFileTime
GetLocaleInfoA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
CreateThread
HeapFree
GetDiskFreeSpaceW
HeapDestroy
InterlockedDecrement
GetCPInfo
HeapCreate
GetSystemTimeAsFileTime
SetEndOfFile
CreateFileMappingA
WriteFile
CreateMutexA
FreeEnvironmentStringsA
TerminateProcess
GetStringTypeExA
GetCurrentProcess
UnhandledExceptionFilter
GetLastError
VirtualAlloc
MoveFileA
MoveFileW
FlushViewOfFile
GetACP
SetUnhandledExceptionFilter
FreeLibrary
lstrlenW
GetEnvironmentStrings
HeapAlloc
lstrlenA
GetEnvironmentVariableA
OpenFileMappingA
InitializeCriticalSection
lstrcmpiA
LeaveCriticalSection
CreateEventA
VirtualQuery
GetStringTypeW
GetFullPathNameA
CreateFileA
GetEnvironmentStringsW
GetFileSize
GetStringTypeA
GetStartupInfoA
LocalFree
OpenFileMappingW
IsBadReadPtr
SetEvent
msvcrt
memcpy
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 460KB - Virtual size: 457KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ