XXX
Static task
static1
Behavioral task
behavioral1
Sample
9ee7568cd74531ac95ba65419b886f08104b66a953718e793446ace60f2eb4dd.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ee7568cd74531ac95ba65419b886f08104b66a953718e793446ace60f2eb4dd.dll
Resource
win10v2004-20221111-en
General
-
Target
9ee7568cd74531ac95ba65419b886f08104b66a953718e793446ace60f2eb4dd
-
Size
44KB
-
MD5
bd5e614ab67ee3c711b778e9823a681b
-
SHA1
6db3609beb20e108b749aebb357b75be3773b2a3
-
SHA256
9ee7568cd74531ac95ba65419b886f08104b66a953718e793446ace60f2eb4dd
-
SHA512
ebc302d8a59f17c78f3ad2fe3a0efd2369fb713ce97bd4715cfcf4bae1eceee3b58386d41d6f9f9ac17a8c2f21d1291290164e204c95a1cb77e720fef91300ec
-
SSDEEP
768:oOIT2dbddKqNKpacKfxD/GYP16PnJtRO:lIT2xXz2KfxD/x96htI
Malware Config
Signatures
Files
-
9ee7568cd74531ac95ba65419b886f08104b66a953718e793446ace60f2eb4dd.dll windows x86
d9307246f48e84eb05da4d142e899818
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetWindowsDirectoryA
CreateFileA
CloseHandle
CopyFileA
lstrlenA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
user32
wsprintfA
advapi32
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
shell32
SHGetFolderPathA
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ