Static task
static1
Behavioral task
behavioral1
Sample
9515cbb78cbf9fcf45b78dfe886bd66fedb25448db4be325a3df12506c677ace.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9515cbb78cbf9fcf45b78dfe886bd66fedb25448db4be325a3df12506c677ace.dll
Resource
win10v2004-20220812-en
General
-
Target
9515cbb78cbf9fcf45b78dfe886bd66fedb25448db4be325a3df12506c677ace
-
Size
16KB
-
MD5
507120c55a093a09320496228e5d4bfd
-
SHA1
834d180179db84e2f584259c196c30cc9b26df3d
-
SHA256
9515cbb78cbf9fcf45b78dfe886bd66fedb25448db4be325a3df12506c677ace
-
SHA512
826440796510b89aedb362167b66ef4983e949c38b449aa2ddaa69de2a680c6ae4c99a5f06f7b5e09e62bfe60cb2917f5f9bbbb45a4cbef172129e37fd8c8d1d
-
SSDEEP
192:Y4by+cTnUCHf96W2/bYGQrRe4ouVCx0Qhap4VEDXa+sIySB3KhuUPqE:Y4G/UA16W2CrA4DV40Aap4qiIyS5kZC
Malware Config
Signatures
Files
-
9515cbb78cbf9fcf45b78dfe886bd66fedb25448db4be325a3df12506c677ace.dll windows x86
7c29b803b09725a52be1828a234e9e62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??3@YAXPAX@Z
strrchr
??2@YAPAXI@Z
strlen
memset
shlwapi
SHDeleteKeyA
psapi
GetModuleFileNameExA
kernel32
ExitProcess
CreateFileA
WaitForSingleObject
OpenProcess
Sleep
CreateProcessA
lstrcmpiA
GetProcAddress
CopyFileA
DeviceIoControl
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ResumeThread
DeleteFileA
CreateThread
lstrcpyA
GetFileSize
lstrlenA
ReadFile
WinExec
LoadLibraryA
LoadLibraryExA
FreeLibrary
Process32First
WriteFile
MultiByteToWideChar
Process32Next
CreateToolhelp32Snapshot
user32
SetProcessWindowStation
OpenDesktopA
wsprintfA
OpenWindowStationA
SetThreadDesktop
advapi32
RegCloseKey
OpenSCManagerA
RegOpenKeyExA
StartServiceA
CreateServiceA
RegSetValueExA
CloseServiceHandle
OpenProcessToken
CreateProcessAsUserA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 666B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ