?FollowSymbolicLink@@YGKHRA_WK@Z
Static task
static1
Behavioral task
behavioral1
Sample
4411f015a716c1b07a49705a62ba6c0c9bd80e2a5440bb833c292b4a4c6a7429.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4411f015a716c1b07a49705a62ba6c0c9bd80e2a5440bb833c292b4a4c6a7429.dll
Resource
win10v2004-20220812-en
General
-
Target
4411f015a716c1b07a49705a62ba6c0c9bd80e2a5440bb833c292b4a4c6a7429
-
Size
126KB
-
MD5
b4912c50a789c4bfd2ecde87bf169222
-
SHA1
fa66ba57b1255f05c27663b87fe1bb34071f5fb4
-
SHA256
4411f015a716c1b07a49705a62ba6c0c9bd80e2a5440bb833c292b4a4c6a7429
-
SHA512
2f41a1ec463ecbb6a09a5737bb70bead9a61d22832502dcaf180cb22dd669f4299b0171c1f046e513b57bd25faecdd41b0360129b37e0f980d826290f9411167
-
SSDEEP
3072:pJqRoWgs0qSm6q7EdK4fjscySn7oRh1l+emyfsUGc2Y:pJqR10m6C4xy1Rh1lCykh
Malware Config
Signatures
Files
-
4411f015a716c1b07a49705a62ba6c0c9bd80e2a5440bb833c292b4a4c6a7429.dll windows x86
3ad9361ad8160b948869856f6facf04d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
SystemTimeToFileTime
CreateDirectoryA
GetCurrentDirectoryW
GetFileAttributesW
DeleteCriticalSection
LoadLibraryW
SetThreadPriority
OpenFileMappingA
TlsSetValue
GetTickCount
CreateMutexA
SetNamedPipeHandleState
ClearCommError
ConnectNamedPipe
RtlUnwind
SetEndOfFile
TerminateThread
IsBadReadPtr
GetFileType
GetCommTimeouts
FoldStringW
OpenEventA
CreatePipe
GetLastError
GetStdHandle
GetWindowsDirectoryA
UnlockFile
GetFileInformationByHandle
OpenSemaphoreW
GetThreadContext
FormatMessageA
LCMapStringA
WaitForMultipleObjectsEx
lstrcpyA
CreateSemaphoreW
HeapReAlloc
CopyFileW
SetSystemTimeAdjustment
IsDBCSLeadByte
CreateRemoteThread
DefineDosDeviceW
CancelWaitableTimer
VirtualQuery
CompareFileTime
RaiseException
MulDiv
WinExec
PulseEvent
GetBinaryTypeW
CreateFileW
GetModuleHandleW
CallNamedPipeW
GetSystemTimeAsFileTime
FlushFileBuffers
HeapValidate
OpenFileMappingW
GlobalDeleteAtom
SetCurrentDirectoryW
GetProcAddress
QueryPerformanceCounter
ExitThread
CreateWaitableTimerA
GetTempPathW
SetThreadAffinityMask
GetCommandLineA
InitializeCriticalSection
UnhandledExceptionFilter
GetExitCodeThread
CreateFileA
CancelIo
RemoveDirectoryW
DeleteFileW
console
CPlApplet
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ