Static task
static1
Behavioral task
behavioral1
Sample
a543a602e4e52353b09ff26067fa4e57a5814ad86926e23fbb495d8ae962c828.dll
Resource
win7-20220311-en
General
-
Target
a543a602e4e52353b09ff26067fa4e57a5814ad86926e23fbb495d8ae962c828
-
Size
316KB
-
MD5
a6b0eb63736bcc5a60dced2ae8213712
-
SHA1
6772df00c0c46dd2183d57885f6d838b1593555f
-
SHA256
a543a602e4e52353b09ff26067fa4e57a5814ad86926e23fbb495d8ae962c828
-
SHA512
8d4e14818a40ee103e39c771ddb34107a6de59d7755070fea63f8d918adf59de31b7a17c3a903796202b03c6c6c6bfda876e61970af89af20687c251756b2218
Malware Config
Signatures
Files
-
a543a602e4e52353b09ff26067fa4e57a5814ad86926e23fbb495d8ae962c828.dll windows x86
4d285c3f2f06c3df97c3cae874c9d500
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
LoadLibraryA
CloseHandle
SetFilePointer
CreateMutexA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
VirtualAlloc
DeleteFileA
GetTempPathA
GetCurrentProcessId
DuplicateHandle
GetFileTime
InitializeCriticalSectionAndSpinCount
VirtualProtect
HeapReAlloc
HeapSize
HeapAlloc
GetConsoleMode
GetConsoleCP
FlushFileBuffers
FindFirstChangeNotificationA
FindNextChangeNotification
OpenMutexA
GetLocalTime
ResetEvent
GetEnvironmentVariableA
GetShortPathNameA
Sleep
GetCurrentThread
FindCloseChangeNotification
ReadFile
PeekNamedPipe
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCurrentThreadId
GetCommandLineA
GetCPInfo
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
LCMapStringA
GetLastError
LCMapStringW
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
ExitProcess
LoadLibraryW
SetHandleCount
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetModuleHandleA
user32
GetMessagePos
CheckMenuItem
DrawFrameControl
FindWindowA
UpdateWindow
ClientToScreen
GetClassNameA
RegisterClassExA
TrackPopupMenu
FillRect
IsWindowEnabled
DrawIcon
GetWindowTextLengthA
GetDC
IsDialogMessageA
GetWindowTextA
GetAsyncKeyState
CheckMenuRadioItem
EnumChildWindows
ShowWindow
FrameRect
GetActiveWindow
AppendMenuA
PostMessageA
DispatchMessageA
SystemParametersInfoA
LoadImageA
gdi32
CreateFontIndirectA
Rectangle
StartDocA
SaveDC
ExtTextOutA
RestoreDC
EndPage
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
GetPrinterDataA
GetPrinterA
comdlg32
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
GetFileTitleA
ChooseFontA
CommDlgExtendedError
comctl32
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_ReplaceIcon
Sections
.text Size: 222KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ