Tpyqotbi
Static task
static1
Behavioral task
behavioral1
Sample
4b4c0746e03dcc3379cad5f428ff13f588796a091afacf3ba585b8f3803939bf.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4b4c0746e03dcc3379cad5f428ff13f588796a091afacf3ba585b8f3803939bf.dll
Resource
win10v2004-20220812-en
General
-
Target
4b4c0746e03dcc3379cad5f428ff13f588796a091afacf3ba585b8f3803939bf
-
Size
84KB
-
MD5
6950d0ab064ca191357bf113713e5f07
-
SHA1
33669246ae649c096f412618d0132f480ebdea49
-
SHA256
4b4c0746e03dcc3379cad5f428ff13f588796a091afacf3ba585b8f3803939bf
-
SHA512
e8ae05d9399869a710193542605dc9bfaa9574abb34192b4c6dd58dfd19a991d039569006aca0be84c4e070a006dd38a4b6406ac0268b966832c23e3b45499ae
-
SSDEEP
1536:S3P479BGYuV9xL/w/cNe6e2ZczOzE8JbIdSgB23gqasHq:S5bL/ZuiczYE85uSgI3q
Malware Config
Signatures
Files
-
4b4c0746e03dcc3379cad5f428ff13f588796a091afacf3ba585b8f3803939bf.dll windows x86
5ebfc2b041901a8f28beb70aaa4a8fe2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetProcAddress
GetSystemTime
GetFileAttributesA
GetNamedPipeInfo
LoadLibraryA
GetVersion
IsValidLocale
GetModuleHandleA
GetHandleInformation
GetLocalTime
msvcrt
fsetpos
fclose
memset
fputc
fwprintf
sprintf
ftell
ferror
fread
_CxxThrowException
_unlink
fwrite
fseek
printf
fprintf
feof
fputs
fopen
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ