Scan
Static task
static1
Behavioral task
behavioral1
Sample
da658065f7da91223876233bd9a9cd91acab5405b740afb2ec283a55824c1336.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
da658065f7da91223876233bd9a9cd91acab5405b740afb2ec283a55824c1336.dll
Resource
win10v2004-20220812-en
General
-
Target
da658065f7da91223876233bd9a9cd91acab5405b740afb2ec283a55824c1336
-
Size
62KB
-
MD5
7a4da2c005421dc7aab40e8cd3a900e3
-
SHA1
10df1e505e1ffc6635d127c5c53a20c0a8752792
-
SHA256
da658065f7da91223876233bd9a9cd91acab5405b740afb2ec283a55824c1336
-
SHA512
c002a6571a8273ff36b3f181b3d2d8b85df9ef0ba9ceb5928834682c67116b92cbe95f42cde341177f9842708290a7f273704fc929200234a9ccfb64f1a96971
-
SSDEEP
768:sdHU+T8UUXZWVEttRCAJYjBB/rZcL4e9o2C4fJtDhfqw2f34fevZNq0litzYS7ym:XygWVMHunTCL4e9o2C4fglf34Cf6r
Malware Config
Signatures
Files
-
da658065f7da91223876233bd9a9cd91acab5405b740afb2ec283a55824c1336.dll windows x86
d36b980c2bb0f5532ebfbe804956a30e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetFileAttributesA
OutputDebugStringA
GetTempPathA
DeleteFileA
lstrcatA
WinExec
GetLastError
FreeResource
WriteFile
SizeofResource
LockResource
LoadResource
FindResourceA
CreateFileA
ExpandEnvironmentStringsA
DeviceIoControl
UnmapViewOfFile
TerminateProcess
MapViewOfFile
CreateFileMappingA
GetFileSize
ReadFile
WaitForSingleObject
CreateProcessA
GetStartupInfoA
CreatePipe
SetFileAttributesA
CopyFileA
GetDriveTypeA
GetLogicalDriveStringsA
GetWindowsDirectoryA
GetSystemTime
TerminateThread
FindClose
FindNextFileA
FindFirstFileA
LoadLibraryA
GetProcAddress
OpenProcess
CloseHandle
Sleep
ExitProcess
GetTickCount
CreateThread
user32
ShowWindow
GetWindowLongA
FindWindowA
advapi32
CreateServiceA
ControlService
CloseServiceHandle
DeleteService
OpenSCManagerA
StartServiceA
OpenServiceA
ws2_32
gethostname
WSAStartup
inet_addr
socket
htons
connect
send
closesocket
inet_ntoa
gethostbyname
wininet
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
mpr
WNetAddConnection2A
rpcrt4
NdrPointerUnmarshall
NdrConformantStringUnmarshall
NdrAllocate
NdrConformantArrayBufferSize
I_RpcGetBuffer
NdrConformantArrayMarshall
NdrServerInitializeNew
RpcRaiseException
NdrPointerBufferSize
NdrConformantStringBufferSize
NdrPointerMarshall
NdrConformantStringMarshall
NdrConvert
NdrConformantArrayUnmarshall
NdrClientInitializeNew
NdrNsGetBuffer
NdrNsSendReceive
NdrFreeBuffer
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA
RpcBindingFree
msvcrt
_adjust_fdiv
_initterm
_onexit
__dllonexit
??2@YAPAXI@Z
??3@YAXPAX@Z
strncpy
fputc
_stricmp
atoi
fwrite
fread
fseek
ftell
strchr
sprintf
_except_handler3
printf
malloc
free
fclose
fopen
msvcp60
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Exports
Exports
Sections
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ