Static task
static1
Behavioral task
behavioral1
Sample
69cb662e34222a12d4af1c4ca8073ce46d4138040893e256ba8206215e272e28.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
69cb662e34222a12d4af1c4ca8073ce46d4138040893e256ba8206215e272e28.dll
Resource
win10v2004-20220901-en
General
-
Target
69cb662e34222a12d4af1c4ca8073ce46d4138040893e256ba8206215e272e28
-
Size
23KB
-
MD5
42cafe61035b856f33dd07454bf52bd0
-
SHA1
559bcebad3eed1495d9280f99aecfbd65bd8f21b
-
SHA256
69cb662e34222a12d4af1c4ca8073ce46d4138040893e256ba8206215e272e28
-
SHA512
394ae50e2f1d6a2feee29e31a7bace4814f7faf8adeca047108983d3598decca84de21b92b9adf4a55f9a594dd24bcac67c85b5fd744f815e14ff8e23d1d6ddf
-
SSDEEP
384:Vnhtc2jewS0eisqG0utvzW7sv2acsqHutLfxR2UV5M7arTdFQ:9hV60oqLaK7RutdR2UrM7uTdFQ
Malware Config
Signatures
Files
-
69cb662e34222a12d4af1c4ca8073ce46d4138040893e256ba8206215e272e28.dll windows x86
b3cf3a05d547b6704d2083e15ed56abd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
GetVersionExA
ExitThread
TerminateThread
WaitForMultipleObjects
GetLastError
ReadFile
CreateMailslotA
CloseHandle
WriteFile
WaitForSingleObject
lstrcatA
CreateThread
CreateFileA
HeapReAlloc
HeapAlloc
GetProcessHeap
OpenProcess
lstrcpyA
HeapFree
lstrlenA
SetFilePointer
CreateMutexA
ReleaseMutex
SetEndOfFile
CreateEventA
lstrcmpA
ResetEvent
CompareStringA
CompareStringW
lstrlenW
GetSystemDirectoryA
CreateDirectoryA
GetTickCount
GetTempFileNameA
GetFileAttributesA
DeleteFileA
user32
wsprintfA
advapi32
OpenProcessToken
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptDecrypt
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegNotifyChangeKeyValue
CreateProcessAsUserA
wininet
HttpOpenRequestA
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
HttpSendRequestA
InternetConnectA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ