COMPUTERNAME
COMPUTERNAME_LEN
C_DIR
C_TEMP_DIR
KEY
SEARCH_PATHS
SEARCH_PATHS_LEN
USERNAME
USERNAME_LEN
_Z3XORPcyPKcy
_Z3exePh
_Z3runv
_Z7httpLogPKcz
_Z7sprintfPcPKcz
_Z9ntRefreshv
payload
payload_len
Static task
static1
Behavioral task
behavioral1
Sample
locale_772.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
locale_772.dll
Resource
win10-en-20211208
Target
locale_772.dll.7z
Size
128KB
MD5
9ead6b70841e73d1a020425785a0985d
SHA1
6b91f368dfaf7231f9ebe03f8e9eee63e68554f1
SHA256
149df23d9a0e658f401478ee95a284a35b58a1d30d9ea420e3147034f5fedbe5
SHA512
61cedc7a958b255daf51e782eb714971b0766efbd932c49e975856789e05c76848d4dc8df732b3652c44d3c26a47982e322ca00c4be91563709c007109f7cf55
SSDEEP
3072:hTwClhVSwtXBbDOFMFkEftse/aVq73SFzhbc2y:Fd3V/XIoJpQWSFlbc2y
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetUserNameA
CloseHandle
CreateFileA
CreateFileMappingA
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memmove
realloc
signal
strcmp
strerror
strlen
strncmp
vfprintf
wcslen
GetModuleInformation
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
COMPUTERNAME
COMPUTERNAME_LEN
C_DIR
C_TEMP_DIR
KEY
SEARCH_PATHS
SEARCH_PATHS_LEN
USERNAME
USERNAME_LEN
_Z3XORPcyPKcy
_Z3exePh
_Z3runv
_Z7httpLogPKcz
_Z7sprintfPcPKcz
_Z9ntRefreshv
payload
payload_len
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ