RMACreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
27fab920457998e7611c07429be1e2f7b345f9acfd7acd54f5a71ad4fde3137f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
27fab920457998e7611c07429be1e2f7b345f9acfd7acd54f5a71ad4fde3137f.dll
Resource
win10v2004-20220812-en
General
-
Target
27fab920457998e7611c07429be1e2f7b345f9acfd7acd54f5a71ad4fde3137f
-
Size
144KB
-
MD5
7701318e73437b58c7baa6d53d595b90
-
SHA1
db23be22e3b897a4e00b40c126a11208d71074ed
-
SHA256
27fab920457998e7611c07429be1e2f7b345f9acfd7acd54f5a71ad4fde3137f
-
SHA512
62b6ea63cf2a5c7b03155a11b50bcaf30c7fc5c4066166213a4d98ca36c75a1ff9b035e7c170384ab7c7d81c3c1cf18168fd344c2fe983f39dfc01a07e678c12
-
SSDEEP
1536:vfTCix3Ii9INjggJny62sl4r4U8bSdyfsrhtGB8jtSPGbmvX6ka+Dn54k:vfTCiBT1gPj+rKJfsltGB2mv0+V4k
Malware Config
Signatures
Files
-
27fab920457998e7611c07429be1e2f7b345f9acfd7acd54f5a71ad4fde3137f.dll windows x86
65e22758531c494e17bf8051c9d16029
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pncrt
fwrite
fseek
??2@YAPAXI@Z
fclose
fopen
free
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
__dllonexit
_onexit
_putenv
_purecall
kernel32
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE