rubesubgf
Static task
static1
Behavioral task
behavioral1
Sample
9b2327e87c2c4c60943c7ee61ee97ef12a0383ea42a4cb740f21bd88718a4dac.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9b2327e87c2c4c60943c7ee61ee97ef12a0383ea42a4cb740f21bd88718a4dac.dll
Resource
win10v2004-20230221-en
General
-
Target
9b2327e87c2c4c60943c7ee61ee97ef12a0383ea42a4cb740f21bd88718a4dac.dll
-
Size
302KB
-
MD5
4e54c1e8694e170244e4b7892bdb3ff0
-
SHA1
f3dd256590597852c7beaa7c75e4b16da07cd96a
-
SHA256
9b2327e87c2c4c60943c7ee61ee97ef12a0383ea42a4cb740f21bd88718a4dac
-
SHA512
91af573642cd6d48519e636affd4d52bf392a29adf41a1ff7be3bb885236296f9ce6b3dfc69713a4e2e29080b90a1f681109ce1c807992a912d081c0dd1e29e7
-
SSDEEP
6144:Sri4LHtI+x1kYuUTxlFR1jUf498LxPiPi4UOjKgAOm05:IltdlFR1ogy+x
Malware Config
Signatures
Files
-
9b2327e87c2c4c60943c7ee61ee97ef12a0383ea42a4cb740f21bd88718a4dac.dll.dll windows x86
d81d2f9a70bdc65bcb5b8983b8a95b86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleExW
GetModuleFileNameW
WaitForSingleObject
MultiByteToWideChar
Sleep
GetLastError
DeleteFileA
CreateDirectoryW
LoadLibraryW
CreateThread
GetWindowsDirectoryW
GetComputerNameW
WideCharToMultiByte
CreateMutexW
ReleaseMutex
FreeLibrary
GetProcAddress
CloseHandle
LoadLibraryA
SetEndOfFile
WriteConsoleW
CreateFileW
HeapSize
SetStdHandle
HeapReAlloc
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStringTypeW
WaitForSingleObjectEx
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LocalFree
LCMapStringEx
GetCPInfo
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetFileAttributesExW
ExitThread
FreeLibraryAndExitThread
ExitProcess
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
GetTimeZoneInformation
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
advapi32
GetUserNameW
RegQueryValueExW
RegOpenKeyExW
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoInitialize
oleaut32
VariantInit
SysFreeString
SysAllocString
VariantClear
wininet
InternetCloseHandle
Exports
Exports
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ