Lotchord
Static task
static1
Behavioral task
behavioral1
Sample
8921d7db3e62f86536acc9c8fcba4cb4107af7a963e99c92a2ff495a35b8589a.dll
Resource
win7-20220223-en
General
-
Target
8921d7db3e62f86536acc9c8fcba4cb4107af7a963e99c92a2ff495a35b8589a
-
Size
392KB
-
MD5
24e15e38a2292d18fc937508cb3ba270
-
SHA1
1b300555d9775b777018794a6ad0dee63016c883
-
SHA256
8921d7db3e62f86536acc9c8fcba4cb4107af7a963e99c92a2ff495a35b8589a
-
SHA512
093cda577a2a75c2a5b5ad92c2518ae641444c8b4eea1c735fcf680f834003df6cfe1e3f73a1d409e4325431365881a34b5f47546693b0748fad84caaf121806
Malware Config
Signatures
Files
-
8921d7db3e62f86536acc9c8fcba4cb4107af7a963e99c92a2ff495a35b8589a.dll windows x86
ce2cf8a335bbda896f2e9922a89c6ced
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLocaleInfoA
CloseHandle
GetEnvironmentVariableW
OpenMutexW
VirtualProtectEx
LoadLibraryW
WaitForSingleObject
SetEvent
LocalAlloc
LocalFree
CreateThread
RemoveDirectoryW
RaiseException
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapSize
LoadLibraryA
InitializeCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
BeginDeferWindowPos
DeferWindowPos
CreateMenu
UnregisterHotKey
LoadCursorW
TranslateMessage
RegisterWindowMessageW
comdlg32
ChooseFontW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
FindTextW
comctl32
ImageList_SetOverlayImage
DestroyPropertySheetPage
ImageList_Add
CreateToolbarEx
CreateStatusWindowW
ImageList_Destroy
ImageList_LoadImageW
ord17
Exports
Exports
Sections
.text Size: 316KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ