yrmcia
Static task
static1
Behavioral task
behavioral1
Sample
9b91c91b74f8f74a1b17de48f5b3e17dcd516773a3cee82a4505b38ea7d95f03.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9b91c91b74f8f74a1b17de48f5b3e17dcd516773a3cee82a4505b38ea7d95f03.dll
Resource
win10v2004-20221111-en
General
-
Target
9b91c91b74f8f74a1b17de48f5b3e17dcd516773a3cee82a4505b38ea7d95f03
-
Size
60KB
-
MD5
e7fc5e9f7c4c419eeeef2b30a28e9245
-
SHA1
3c8b1aa6497d5ee5df39dfb0d70c85622317d763
-
SHA256
9b91c91b74f8f74a1b17de48f5b3e17dcd516773a3cee82a4505b38ea7d95f03
-
SHA512
3541e165bff49e15bcbf5ffd3fab2aacd7d53792027772e253910d873a9d52e5530dace5ae87042c705fa46888772e5a129abcf1f9ee88e9ae0bca91de9ea6de
-
SSDEEP
1536:v5gvJuLFTIwIuoBiPWtd9zjy3FeUS6891:vKvJCIwDCiPud5yVeW891
Malware Config
Signatures
Files
-
9b91c91b74f8f74a1b17de48f5b3e17dcd516773a3cee82a4505b38ea7d95f03.dll windows x86
b670f2cd492376edc352dae2b6066846
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetEvent
OpenEventW
SetCurrentDirectoryW
GetSystemDirectoryW
SetLastError
ExpandEnvironmentStringsW
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindFirstFileW
FindClose
GetLocalTime
CreateThread
DeviceIoControl
SetErrorMode
GetVolumeInformationW
GetDiskFreeSpaceW
GetCommandLineW
GetDriveTypeW
SetVolumeLabelW
GetEnvironmentVariableW
Sleep
CloseHandle
SetStdHandle
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
lstrcpyA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
GetCommandLineA
RtlUnwind
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
GetProcessHeap
InterlockedExchange
InterlockedCompareExchange
msvcrt
free
_initterm
_amsg_exit
_adjust_fdiv
_except_handler4_common
_XcptFilter
malloc
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ