RunDLL
Static task
static1
Behavioral task
behavioral1
Sample
606b93f8ca5d6f3181a1bb1f4e38a94b667d7cbdaf9f9dc6e9442e6f342b1390.dll
Resource
win7-20220311-en
General
-
Target
606b93f8ca5d6f3181a1bb1f4e38a94b667d7cbdaf9f9dc6e9442e6f342b1390
-
Size
322KB
-
MD5
945c9a2026124147d72a75df8c104953
-
SHA1
89ae668767172a5bded07904105fe80ce6820781
-
SHA256
606b93f8ca5d6f3181a1bb1f4e38a94b667d7cbdaf9f9dc6e9442e6f342b1390
-
SHA512
ad406110d3cd2af76f7e01b49c08b8b4a2213fa07e6a307af0a043fd0ffd65c76c56250c6e91559ac0068d32bd95d1b9fc845ae90f5c8cc4b56c5bae005f7449
Malware Config
Signatures
Files
-
606b93f8ca5d6f3181a1bb1f4e38a94b667d7cbdaf9f9dc6e9442e6f342b1390.dll windows x86
6331b8d328e50ece12fb3152d5c158b6
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleHandleW
WriteFileGather
VirtualAllocExNuma
GetProcAddress
VirtualAlloc
LoadLibraryA
CloseHandle
GetNativeSystemInfo
VirtualQuery
FreeLibrary
HeapAlloc
HeapFree
VirtualFree
GetProcessHeap
IsBadReadPtr
SetLastError
VirtualProtect
CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
SetFilePointer
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
HeapSize
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
DebugBreak
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapValidate
RaiseException
RtlUnwind
TerminateProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetLastError
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
user32
ShowWindow
MessageBoxA
Exports
Exports
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ