OpenThvraye
Static task
static1
Behavioral task
behavioral1
Sample
a0804fc2c3e4f37b16c390b72fa29ab1464f562b2d5cee438d3e13b537b0994f.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a0804fc2c3e4f37b16c390b72fa29ab1464f562b2d5cee438d3e13b537b0994f.dll
Resource
win10v2004-20220901-en
General
-
Target
a0804fc2c3e4f37b16c390b72fa29ab1464f562b2d5cee438d3e13b537b0994f
-
Size
92KB
-
MD5
74fa4b7473489578537271155f4aa9e1
-
SHA1
09b2737c2afbb68e875cf7925dc9032cdf230016
-
SHA256
a0804fc2c3e4f37b16c390b72fa29ab1464f562b2d5cee438d3e13b537b0994f
-
SHA512
212a4792ea63d36a1405e78bd69437e703ffad99cac7bb355f77cc93dddb00935b0496820d7f141cc69891c5d9db582734c88df97465b77928cb3a4c9a9b9e4f
-
SSDEEP
1536:+B6UdA2JPUOtrcq1w3/GkFRA2qPQUa65UMUgZygf6HBG5ba/Hd:+kgA2VazAzPQUa65UIZylH48vd
Malware Config
Signatures
Files
-
a0804fc2c3e4f37b16c390b72fa29ab1464f562b2d5cee438d3e13b537b0994f.dll windows x86
af6814a8d7f091e1d89d829ba7827d7d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
VirtualProtect
GetModuleHandleA
ExitProcess
SetConsoleScreenBufferSize
GetStartupInfoA
GetModuleFileNameA
advapi32
GetTokenInformation
ReadEventLogW
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ldata2 Size: 2KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enull Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ