Static task
static1
Behavioral task
behavioral1
Sample
b447308c178616740451136c3f7cd77f2e062af44937184715c3b128cb546c0f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b447308c178616740451136c3f7cd77f2e062af44937184715c3b128cb546c0f.dll
Resource
win10v2004-20220812-en
General
-
Target
b447308c178616740451136c3f7cd77f2e062af44937184715c3b128cb546c0f
-
Size
37KB
-
MD5
ec23105906d5855dc40d15b7fff79f50
-
SHA1
09fa90dd7bdb033fa1a5cce476f4ca3ec2153b9c
-
SHA256
b447308c178616740451136c3f7cd77f2e062af44937184715c3b128cb546c0f
-
SHA512
96080c5fd4750dd30abb60928c6ee430c486fe0f69094e7a0c65743c8ec3dbd07839d89611e3482993e989419a07b1b43d68508f268bd5afb8ae220ce25c565b
-
SSDEEP
384:Kn+/LXSRUeHKP5+lNKdXRy74F52cCupdvr61:k+/L4Ck6X0y58upJr61
Malware Config
Signatures
Files
-
b447308c178616740451136c3f7cd77f2e062af44937184715c3b128cb546c0f.dll windows x86
a937a6ad8e38c2da1219262a6d0c1799
Code Sign
79:7e:c6:b0:ce:1b:06:32:5d:11:8b:f2:06:2a:4a:0d:97:8c:06:0eSigner
Actual PE Digest79:7e:c6:b0:ce:1b:06:32:5d:11:8b:f2:06:2a:4a:0d:97:8c:06:0eDigest Algorithmsha1PE Digest MatchestrueTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
GetTickCount
GetSystemTime
LocalAlloc
LocalFree
LoadLibraryA
Sleep
GetModuleHandleA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetCommandLineA
GetProcAddress
CreateThread
advapi32
SetServiceStatus
RegisterServiceCtrlHandlerA
msvcrt
strstr
rand
__CxxFrameHandler
sprintf
srand
??3@YAXPAX@Z
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
ServiceMain
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 698B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ