Static task
static1
Behavioral task
behavioral1
Sample
398ba858f4357263431b687dae35d695dbed8445003093e2624abdee2c2ec1ac.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
398ba858f4357263431b687dae35d695dbed8445003093e2624abdee2c2ec1ac.dll
Resource
win10v2004-20220812-en
General
-
Target
398ba858f4357263431b687dae35d695dbed8445003093e2624abdee2c2ec1ac
-
Size
111KB
-
MD5
832d3b12b09c444eed3b71704dc14ec7
-
SHA1
3e5f6019a0f97833309c54b8009ae175645eab98
-
SHA256
398ba858f4357263431b687dae35d695dbed8445003093e2624abdee2c2ec1ac
-
SHA512
814d233ec44524dfb5d7334da68e0df49c445e2c517635bea24b607c70f41424ce86765f9b97058c608edd7c65763bc1a4f2618b87848e18858e609aab817d22
-
SSDEEP
1536:k5fMRgCWF9knbfQzoQx+wCOb4uek0FIfuVzkcj1DCTN28K:kZMUkSoQxHCb1wuNdj1DCTZK
Malware Config
Signatures
Files
-
398ba858f4357263431b687dae35d695dbed8445003093e2624abdee2c2ec1ac.dll windows x86
f209ae09d2305c84701b558564e4bdae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
OpenFileMappingW
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
HeapAlloc
GetTickCount
UnmapViewOfFile
CreateFileA
DeviceIoControl
DisableThreadLibraryCalls
CloseHandle
GetSystemDirectoryA
DeleteFileA
GetVersionExA
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetCommandLineA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetStringTypeW
user32
IsDlgButtonChecked
MessageBoxA
LoadStringA
SendMessageA
EnableWindow
GetFocus
GetDlgItemTextA
SendDlgItemMessageA
SetDlgItemTextA
GetDlgItem
wsprintfA
advapi32
RegOpenKeyExA
CloseServiceHandle
StartServiceA
ControlService
DeleteService
CreateServiceA
UnlockServiceDatabase
OpenServiceA
LockServiceDatabase
RegOpenKeyA
RegCreateKeyExA
RegEnumValueA
RegCloseKey
rpcrt4
NdrClientCall2
RpcBindingFree
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ