Static task
static1
Behavioral task
behavioral1
Sample
36ad733b1f95e3d07b3500b3543d96676a4cf3c117d59858cdf5014bc621066a.dll
Resource
win7-20220311-en
General
-
Target
36ad733b1f95e3d07b3500b3543d96676a4cf3c117d59858cdf5014bc621066a
-
Size
188KB
-
MD5
ece5c99a1f9db95c220fc8b253afa290
-
SHA1
ad40b365004ecd67f860c7bfea175dc06c99b146
-
SHA256
36ad733b1f95e3d07b3500b3543d96676a4cf3c117d59858cdf5014bc621066a
-
SHA512
cfe9a77a29d5ece563c295f3780e2f60db0baf6bc21eeee6e0ea0ad3d4739da152a05bf0d2e89d8f7ee12d666b7a5d133e93144ab6f7e186268c82786b6f7a83
Malware Config
Signatures
Files
-
36ad733b1f95e3d07b3500b3543d96676a4cf3c117d59858cdf5014bc621066a.dll windows x86
5044a17199bcd86833fec950ec1960cd
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetFileTime
GetModuleFileNameA
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationA
VirtualProtect
GetTempPathA
MoveFileExA
GetTickCount
DeleteFileA
CopyFileA
GetStartupInfoA
CloseHandle
CreateProcessA
Sleep
RaiseException
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapSize
LoadLibraryA
InitializeCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
advapi32
StartServiceCtrlDispatcherA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetEntriesInAclA
SetSecurityDescriptorDacl
SetServiceStatus
AdjustTokenPrivileges
CloseServiceHandle
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
OpenProcessToken
RegEnumKeyA
InitializeSecurityDescriptor
LookupPrivilegeValueA
GetTokenInformation
DeleteService
CreateServiceA
ControlService
user32
InsertMenuItemA
SetCursor
GetDlgItemInt
SetDlgItemInt
gdi32
CreateFontIndirectA
RectVisible
TextOutA
Escape
Rectangle
RestoreDC
SaveDC
ExtTextOutA
StartDocA
StartPage
comctl32
ImageList_AddMasked
ImageList_SetIconSize
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_GetImageCount
Sections
.text Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ