RInit2
Static task
static1
Behavioral task
behavioral1
Sample
9dd50946bff84b2b1ed5dd49c558a04bc268f943c16927eed55a1ac225450ba6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9dd50946bff84b2b1ed5dd49c558a04bc268f943c16927eed55a1ac225450ba6.dll
Resource
win10v2004-20221111-en
General
-
Target
9dd50946bff84b2b1ed5dd49c558a04bc268f943c16927eed55a1ac225450ba6
-
Size
26KB
-
MD5
03ea0c27614d7837fde50b46940c2c90
-
SHA1
71d2a8c460d4fff42c9b40417f409e55e9ae9a09
-
SHA256
9dd50946bff84b2b1ed5dd49c558a04bc268f943c16927eed55a1ac225450ba6
-
SHA512
261e1c231315f76bd135833d0a11d3a4d41075997fe3c667e9f260cb0cee39d3ed1725c6d359ab840bf0d684807798f2a3437ccb46b2169a7da77b2e89fd4f82
-
SSDEEP
768:yCx0fPQIkdmqSsktpogbQFc/Wz96UoxoxxSi8tfUzZJJyq:30fPQIkdmqSsktpogbQFc/WcMxMMZJJ
Malware Config
Signatures
Files
-
9dd50946bff84b2b1ed5dd49c558a04bc268f943c16927eed55a1ac225450ba6.dll windows x86
5b5f6206fc045ea5a7faf31feee63efc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
inet_addr
gethostbyname
kernel32
lstrcatA
lstrlenA
GetTempPathA
lstrcmpiA
lstrcpyA
lstrcpynA
GlobalFree
GlobalAlloc
lstrcmpA
DeleteFileA
GetTempFileNameA
FindClose
FindFirstFileA
UnmapViewOfFile
CreateEventA
CreateFileMappingA
CreateFileA
LoadLibraryA
GetLastError
RtlUnwind
FindNextFileA
MoveFileA
Sleep
CreateThread
GetModuleFileNameA
VirtualQuery
FreeLibrary
SetEvent
ExitProcess
OpenEventA
WaitForSingleObject
CloseHandle
GetModuleHandleA
GetProcAddress
MapViewOfFile
GetTickCount
user32
SendMessageA
EnumWindows
GetWindowThreadProcessId
PostMessageA
CharLowerA
wsprintfA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
Exports
Exports
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ