Behavioral task
behavioral1
Sample
16a1cdadc7b848ef3f557291f69889de040d20ecd5c750cea1e8ad1561fcd10c.dll
Resource
win7-20220414-en
General
-
Target
16a1cdadc7b848ef3f557291f69889de040d20ecd5c750cea1e8ad1561fcd10c
-
Size
391KB
-
MD5
b685d1ae9a1038148e31396c43ab7498
-
SHA1
cba868c11941d356c6ad245efd2f3a6a0630cfc7
-
SHA256
16a1cdadc7b848ef3f557291f69889de040d20ecd5c750cea1e8ad1561fcd10c
-
SHA512
81ddd7fb4daa5bca490ec413fe07fa8b3349849d763aa21860b1b99de1ea1e71ae78f1f30c5f6e227ee81142211527d03d7ee5bdcb8968bb826ebeb00d0bb3ef
-
SSDEEP
12288:l5cOrsIspfOntC1MdHjZ9Nlw6YTNndSDPF:y1OtC1MVFtw6YTtdq
Malware Config
Signatures
Files
-
16a1cdadc7b848ef3f557291f69889de040d20ecd5c750cea1e8ad1561fcd10c.dll windows x86
00cb5f98d51303e51531c3e841453c6f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PostQueuedCompletionStatus
FindResourceExA
GetNumberOfConsoleMouseButtons
GenerateConsoleCtrlEvent
IsBadWritePtr
GetFileAttributesW
VirtualAlloc
ReadConsoleInputW
GetLocaleInfoW
GetTickCount
FindNextVolumeA
WritePrivateProfileSectionA
DeleteTimerQueueTimer
Module32NextW
DefineDosDeviceW
ReadProcessMemory
CopyFileExA
GetExitCodeThread
ScrollConsoleScreenBufferW
LockFile
HeapDestroy
GetDefaultCommConfigW
VirtualProtectEx
CreateDirectoryExA
InitializeCriticalSection
UnlockFileEx
SetProcessWorkingSetSize
GlobalFindAtomA
SetConsoleCursor
lstrcpyA
GetEnvironmentStringsA
GetTapePosition
FindFirstChangeNotificationW
SetUnhandledExceptionFilter
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSize
MoveFileExW
GetCurrentProcess
WaitForSingleObject
InterlockedCompareExchange
OpenProcess
GetSystemDirectoryW
Sleep
GetVersionExW
MoveFileW
GetSystemInfo
GetModuleHandleA
DeleteFileW
DeviceIoControl
GetLastError
CreateFileW
CreateProcessW
GetCurrentProcessId
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetModuleFileNameW
lstrlenW
GetProcAddress
LoadLibraryW
LoadLibraryA
GetLocaleInfoA
LoadLibraryExW
GetStringTypeW
GetStringTypeA
CloseHandle
LCMapStringA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
RaiseException
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFilePointerEx
WriteFile
ReadFile
GetFileSizeEx
OutputDebugStringW
FormatMessageW
MultiByteToWideChar
SetLastError
GetCurrentThreadId
LocalFree
GetSystemTime
CreateMutexW
TlsGetValue
HeapAlloc
HeapFree
GetProcessHeap
TlsSetValue
GetAtomNameW
OpenThread
AddAtomW
ReleaseMutex
TlsAlloc
FindAtomW
DeleteAtom
TlsFree
GetStartupInfoW
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
RtlUnwind
InterlockedDecrement
SetErrorMode
user32
LoadImageA
EnumPropsA
GetLastInputInfo
SetWindowLongA
SetWindowPlacement
SetMenuDefaultItem
GetQueueStatus
GetAltTabInfoA
UnpackDDElParam
GetClipboardFormatNameW
GetKBCodePage
MapVirtualKeyExW
GetNextDlgTabItem
SetDlgItemTextA
IsIconic
SetPropA
GetParent
GetThreadDesktop
EnumPropsExW
BlockInput
IMPSetIMEA
GetSystemMetrics
GetWindowRect
GetDesktopWindow
PostMessageW
FindWindowW
DialogBoxParamW
GetDlgItem
SetWindowTextW
LoadStringW
EndDialog
RegisterClassW
GetClassInfoW
SetWindowPos
LoadCursorFromFileA
gdi32
ExtCreateRegion
BRUSHOBJ_ulGetBrushColor
CreateDiscardableBitmap
HT_Get8BPPFormatPalette
SetWinMetaFileBits
STROBJ_vEnumStart
GdiDescribePixelFormat
SetMetaFileBitsEx
UnloadNetworkFonts
bMakePathNameW
DeleteColorSpace
GdiConvertFont
GdiQueryFonts
GdiFixUpHandle
GetEnhMetaFileBits
GetStockObject
advapi32
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
RegQueryValueExA
RegEnumKeyExW
RegOpenKeyA
shell32
SHQueryRecycleBinW
ExtractAssociatedIconExA
ExtractIconW
SHLoadNonloadedIconOverlayIdentifiers
SHGetPathFromIDListA
Shell_NotifyIconW
CommandLineToArgvW
SHGetFileInfo
SHGetFileInfoW
ExtractIconA
FindExecutableW
ShellExecuteExA
SHFileOperation
SHGetFileInfoA
SHGetDiskFreeSpaceExA
SHAppBarMessage
SHChangeNotify
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree
shlwapi
StrChrW
StrRChrIA
StrRChrW
StrCmpNW
StrStrA
StrChrIA
SHDeleteValueW
PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyW
imm32
ImmDisableIME
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata8 Size: 343KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ