Static task
static1
Behavioral task
behavioral1
Sample
a9056f952fd7ccf92deb261ad5f8b9dbcdec5beca1903b6d7655926b7a076bd6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9056f952fd7ccf92deb261ad5f8b9dbcdec5beca1903b6d7655926b7a076bd6.dll
Resource
win10v2004-20220812-en
General
-
Target
a9056f952fd7ccf92deb261ad5f8b9dbcdec5beca1903b6d7655926b7a076bd6
-
Size
16KB
-
MD5
0b81a258f1571f8cb946aa81f38e5438
-
SHA1
bbb3371b4f27ece7f25c5012424c7e17eca202ad
-
SHA256
a9056f952fd7ccf92deb261ad5f8b9dbcdec5beca1903b6d7655926b7a076bd6
-
SHA512
fc2456251f76ac6e0be27218ffcc66138381f0b8e956e5e59298f24352291c9bd7b2e47bf65afd434e5017fa0c5ea541315977b28f40aea3a18a695699281ea6
-
SSDEEP
384:bTOXOV05dUGBIV9yvAa3DLlfcHj3czsH/sT:wOW5qGB29yoa3DBcHzczsf
Malware Config
Signatures
Files
-
a9056f952fd7ccf92deb261ad5f8b9dbcdec5beca1903b6d7655926b7a076bd6.dll windows x86
f7f433dab4f8b8672d220f5eb0684f2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??3@YAXPAX@Z
strrchr
??2@YAPAXI@Z
memset
shlwapi
SHDeleteKeyA
kernel32
WaitForSingleObject
OpenProcess
Sleep
CreateProcessA
lstrcmpiA
GetProcAddress
CopyFileA
DeviceIoControl
GetModuleFileNameA
GetModuleHandleA
CreateFileA
ResumeThread
DeleteFileA
CreateThread
lstrcpyA
GetFileSize
lstrlenA
ReadFile
WinExec
LoadLibraryA
LoadLibraryExA
FreeLibrary
Process32First
WriteFile
MultiByteToWideChar
Process32Next
CreateToolhelp32Snapshot
ExitProcess
CloseHandle
user32
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
wsprintfA
SetThreadDesktop
advapi32
RegCloseKey
OpenSCManagerA
RegOpenKeyExA
StartServiceA
CreateServiceA
RegSetValueExA
CloseServiceHandle
OpenProcessToken
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ