DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f42f67111fb82b182127600253295611af081bdba83ca7f6e6467d5ce2938f40.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f42f67111fb82b182127600253295611af081bdba83ca7f6e6467d5ce2938f40.dll
Resource
win10v2004-20220812-en
General
-
Target
f42f67111fb82b182127600253295611af081bdba83ca7f6e6467d5ce2938f40
-
Size
39KB
-
MD5
00eec24f6c02dacb27bfa69f56f34e30
-
SHA1
6a6ea677f4caba08555b4c311ed9f711a3e708e9
-
SHA256
f42f67111fb82b182127600253295611af081bdba83ca7f6e6467d5ce2938f40
-
SHA512
d99a5c7129d6fd3ad520d2e5cb27a0223e61da74bd81c8818bd43e895fc3aee5e5ecd4c4a7820e9654e8dc85edd650f6d9e6884dee59345cf1ded0ac85cc8750
-
SSDEEP
768:fbqASdmD0JqaPQi3XacD57z4W5KS4gL/Fhcd:zqPdmD0JqaPQi3qEPAML/Fm
Malware Config
Signatures
Files
-
f42f67111fb82b182127600253295611af081bdba83ca7f6e6467d5ce2938f40.dll windows x86
aeb65deee3cf5b2d454480bd27810ee1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
CreateFileA
GetSystemInfo
SetPriorityClass
GetCurrentThreadId
CloseHandle
HeapAlloc
DeleteFileA
GetCurrentProcess
CreateThread
HeapFree
GetTickCount
WriteFile
Sleep
HeapCreate
ReadFile
ExitThread
GetWindowsDirectoryA
FreeLibraryAndExitThread
GetModuleHandleA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
urlmon
URLDownloadToFileA
ntdll
NtQueueApcThread
RtlFreeHeap
NtAlertThread
RtlAdjustPrivilege
NtQuerySystemInformation
_wcsicmp
RtlAllocateHeap
NtClose
sprintf
_aullshr
memset
NtOpenThread
memcpy
_allmul
ws2_32
connect
inet_addr
htons
socket
gethostbyname
WSACleanup
setsockopt
recv
closesocket
send
WSAStartup
Exports
Exports
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ