ReleaseUpdateListRef
Static task
static1
Behavioral task
behavioral1
Sample
a2248f7886f830f0851f541f5c95e52a43328e0454d407b3c58071e8a7f36a22.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2248f7886f830f0851f541f5c95e52a43328e0454d407b3c58071e8a7f36a22.dll
Resource
win10v2004-20221111-en
General
-
Target
a2248f7886f830f0851f541f5c95e52a43328e0454d407b3c58071e8a7f36a22
-
Size
47KB
-
MD5
90f24f90a13daef39ff03e95b0ed739e
-
SHA1
6d592234208e6a5c2478e9424e9bf154c237669e
-
SHA256
a2248f7886f830f0851f541f5c95e52a43328e0454d407b3c58071e8a7f36a22
-
SHA512
48c2c2adf58fc8bff22e0546d2dcab7135401d22d039c18dc00b2496cfaf38822f5f88dbc0795809022316b25e43caa36ebeb32fcc74872b540e02c4e31cf205
-
SSDEEP
768:wrd0gddwheyGCW2FFSWQ9ss01TO3ZzIEDST4CO1xx6goTOEv1nX5KRwrWLjpyfsM:yygdduepp2vSWQ9214zIut1wS4nXm808
Malware Config
Signatures
Files
-
a2248f7886f830f0851f541f5c95e52a43328e0454d407b3c58071e8a7f36a22.dll windows x86
92553d91778e2a8cae602512a2cf80db
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetStartupInfoA
GetSystemInfo
GlobalLock
HeapAlloc
HeapCreate
InitializeCriticalSection
InterlockedDecrement
LoadResource
MultiByteToWideChar
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsGetValue
WriteConsoleW
lstrcmpA
msvcrt
_exit
time
wcscmp
fprintf
user32
RegisterClassA
EndDialog
LoadMenuA
DrawFrameControl
DefFrameProcA
DefDlgProcA
InvalidateRgn
GetMenuCheckMarkDimensions
FrameRect
DrawIconEx
EnumChildWindows
oleaut32
VarBstrCmp
SafeArrayAllocDescriptor
SafeArrayDestroy
SysReAllocString
SafeArrayAccessData
shlwapi
PathGetDriveNumberA
SHEnumKeyExA
PathAppendA
Exports
Exports
Sections
.text Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ