Static task
static1
Behavioral task
behavioral1
Sample
a42c24a6a3d63f8b89dfd58a21c9a4341174c94a9c0d99ba2e9cb1b9141c529f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a42c24a6a3d63f8b89dfd58a21c9a4341174c94a9c0d99ba2e9cb1b9141c529f.dll
Resource
win10v2004-20220812-en
General
-
Target
a42c24a6a3d63f8b89dfd58a21c9a4341174c94a9c0d99ba2e9cb1b9141c529f
-
Size
144KB
-
MD5
4169900f89a54ec8970fc98d50c48dbd
-
SHA1
f77147cfb460719314d58175016bcd2b7a79fbc3
-
SHA256
a42c24a6a3d63f8b89dfd58a21c9a4341174c94a9c0d99ba2e9cb1b9141c529f
-
SHA512
a0b81f49fa33a3b7a90cbef88c68fc77eef30dc421420c684df455408bd39f75e1c5dc5eb8e6428173e3dacef10d672a69d36586982e0e8c2074266ddc2123da
-
SSDEEP
1536:nwhDPadQTN0Zdlppph+AHTUiCgzw3BWtvbC2XGrR56pFm78k66EC4VnMkbO+sc8O:nwda00Zdbp3+lidG22igpHg2c8uXsAVh
Malware Config
Signatures
Files
-
a42c24a6a3d63f8b89dfd58a21c9a4341174c94a9c0d99ba2e9cb1b9141c529f.dll windows x86
7c29b803b09725a52be1828a234e9e62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??3@YAXPAX@Z
strrchr
??2@YAPAXI@Z
strlen
memset
shlwapi
SHDeleteKeyA
psapi
GetModuleFileNameExA
kernel32
ExitProcess
CreateFileA
WaitForSingleObject
OpenProcess
Sleep
CreateProcessA
lstrcmpiA
GetProcAddress
CopyFileA
DeviceIoControl
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ResumeThread
DeleteFileA
CreateThread
lstrcpyA
GetFileSize
lstrlenA
ReadFile
WinExec
LoadLibraryA
LoadLibraryExA
FreeLibrary
Process32First
WriteFile
MultiByteToWideChar
Process32Next
CreateToolhelp32Snapshot
user32
SetProcessWindowStation
OpenDesktopA
wsprintfA
OpenWindowStationA
SetThreadDesktop
advapi32
RegCloseKey
OpenSCManagerA
RegOpenKeyExA
StartServiceA
CreateServiceA
RegSetValueExA
CloseServiceHandle
OpenProcessToken
CreateProcessAsUserA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 662B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ