Static task
static1
Behavioral task
behavioral1
Sample
75aa737c57170f7fbe485ffcdb1cfd3e850f28470085725800f8cb173231ab9e.dll
Resource
win7-20220414-en
General
-
Target
75aa737c57170f7fbe485ffcdb1cfd3e850f28470085725800f8cb173231ab9e
-
Size
625KB
-
MD5
f446cbf6a507d8d40677b846671a85ab
-
SHA1
48a13826bd7e3ba6a24abadcf3ae4dcfcdd09d43
-
SHA256
75aa737c57170f7fbe485ffcdb1cfd3e850f28470085725800f8cb173231ab9e
-
SHA512
cf41217e8ebf8dd4707db07759e67bcce4af3cd87228d11c5645b7df97b342a419ff0050ec1d65a1ec01467c80d32acfc1ebe60249d94809711d9164feaf0b03
-
SSDEEP
6144:iJibnBlvYLXIrM5WvrGCrZoU1crOPxU5g8ZdOp/qtlraJCf:qiVlvYLlSGCrCUrxV8nOpqaJCf
Malware Config
Signatures
Files
-
75aa737c57170f7fbe485ffcdb1cfd3e850f28470085725800f8cb173231ab9e.dll windows x86
0c7726b62387b6e98bf076fda9380f67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObjectEx
CloseHandle
CreateThread
OutputDebugStringW
OutputDebugStringA
WriteFile
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
CreateSemaphoreA
VirtualProtectEx
GetTempPathA
Sleep
WriteConsoleW
VirtualProtect
GetStringTypeW
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
GetFileType
GetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapValidate
GetSystemInfo
LCMapStringW
FindClose
FindFirstFileExA
CreateFileW
user32
DestroyIcon
SetDlgItemTextA
RegisterClassExA
GetWindowTextLengthA
IsDlgButtonChecked
DrawEdge
FrameRect
ClientToScreen
SystemParametersInfoA
ScreenToClient
GetKeyNameTextA
gdi32
SetRectRgn
SelectObject
GetTextExtentPoint32A
SetPixel
PatBlt
StretchBlt
AbortDoc
EndDoc
GetDeviceCaps
CombineRgn
SetAbortProc
userenv
EnterCriticalPolicySection
wtsapi32
WTSQueryUserToken
WTSCloseServer
WTSOpenServerA
uxtheme
GetThemeFont
CloseThemeData
GetThemeTextExtent
msimg32
GradientFill
TransparentBlt
AlphaBlend
tapi32
lineOpenA
lineInitialize
lineTranslateDialogA
lineClose
lineRedirectA
lineTranslateAddressA
lineNegotiateAPIVersion
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 349KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ