BindISP
Static task
static1
Behavioral task
behavioral1
Sample
9ce11f0b08d2bfa6d0612f7767481a320fb01ca0c979de256aff4f1f8cb162ca.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ce11f0b08d2bfa6d0612f7767481a320fb01ca0c979de256aff4f1f8cb162ca.dll
Resource
win10v2004-20221111-en
General
-
Target
9ce11f0b08d2bfa6d0612f7767481a320fb01ca0c979de256aff4f1f8cb162ca
-
Size
52KB
-
MD5
3999d4b514f7c52d41c2e5d5f456fc1d
-
SHA1
b5ab2e6700c3211dd1ee32cb28d867d3ec7bd3f9
-
SHA256
9ce11f0b08d2bfa6d0612f7767481a320fb01ca0c979de256aff4f1f8cb162ca
-
SHA512
4e56d0f545f69512da820277725d55b635c52e369eb120bc0aafd29f40758eb2a9b2bf3c813a3f822dacc33e6bdc80d7148d994fa181f816a425f7f1a8eea3d2
-
SSDEEP
768:uuWRXJ+XOtyrz3NzxJIO1LzMjc8v7As0a4o9z8weZM:ujtJ+XOMP3Nt9BMZUsGoRe
Malware Config
Signatures
Files
-
9ce11f0b08d2bfa6d0612f7767481a320fb01ca0c979de256aff4f1f8cb162ca.dll windows x86
7457a2ec21a312290c07c365b5f26b73
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetVersion
GetProcAddress
CloseHandle
LoadLibraryA
VirtualFree
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLastError
GetSystemTimeAsFileTime
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind
user32
GetDC
GetSystemMetrics
GetClientRect
gdi32
Rectangle
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEA Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CODEB Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ