Norbest@@4
Static task
static1
Behavioral task
behavioral1
Sample
6b9dea0ee12016eb5575f80c6e146c7cc3daebfedb45d8ddbbd84f639ec83855.dll
Resource
win7-20220414-en
General
-
Target
6b9dea0ee12016eb5575f80c6e146c7cc3daebfedb45d8ddbbd84f639ec83855
-
Size
275KB
-
MD5
65170474a68cb34c8f2f2e1509ef95cd
-
SHA1
7884fb513decf5a218a7103e4a89ff70195b7a81
-
SHA256
6b9dea0ee12016eb5575f80c6e146c7cc3daebfedb45d8ddbbd84f639ec83855
-
SHA512
e217e0ed697136e8b1fd5f07747c24303d8bd511938e69aebdd5383471fad3a03fe7a0ca9cdafe4855088221418263a02a2dedf3ab1b931ff619079fb1b5623c
-
SSDEEP
6144:+f6fEihsJCxlBTUYwQQk1A57NfOc74iTAOCrzVofR:+f6M43xbUYwyML7xKOfR
Malware Config
Signatures
Files
-
6b9dea0ee12016eb5575f80c6e146c7cc3daebfedb45d8ddbbd84f639ec83855.dll windows x86
43bad2fde6ded9ed704f747032a488de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
Sleep
CreateFileW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetCPInfo
WideCharToMultiByte
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
FreeLibrary
LoadLibraryExW
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointerEx
SetStdHandle
HeapSize
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
WriteConsoleW
netapi32
NetWkstaSetInfo
NetWkstaGetInfo
NetApiBufferFree
Exports
Exports
Sections
.text Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ