Static task
static1
Behavioral task
behavioral1
Sample
ce2570dda3b92d0adfadfe00ee18302e98a0b9611ca1043954290961cd2fe8a8.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
ce2570dda3b92d0adfadfe00ee18302e98a0b9611ca1043954290961cd2fe8a8.dll
Resource
win10v2004-20220414-en
General
-
Target
ce2570dda3b92d0adfadfe00ee18302e98a0b9611ca1043954290961cd2fe8a8
-
Size
108KB
-
MD5
d668b501a15c545b8eb1daaa74376aba
-
SHA1
8ae3879a74aa507eaa8bf3b25f45b973c979b588
-
SHA256
ce2570dda3b92d0adfadfe00ee18302e98a0b9611ca1043954290961cd2fe8a8
-
SHA512
54e5fa3768880ede13780001c7d6c449f2eb34f6b075e714dc2c3b2c50056e9de5565396f1ada119cac1eabc26cc912eb15f3cc65ae2b1302afd6c519ddd08b8
-
SSDEEP
3072:mCNm4ZJcAn2pAPybl1a4eYV8gkvxmEPgfbqd:mSDnzPyQvxmEP
Malware Config
Signatures
Files
-
ce2570dda3b92d0adfadfe00ee18302e98a0b9611ca1043954290961cd2fe8a8.dll windows x86
6b9dc7640818cb41fcb879d3bc3284fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
ResetEvent
CloseHandle
SetEvent
InterlockedIncrement
InterlockedDecrement
GetFileAttributesExW
FileTimeToSystemTime
RaiseException
MultiByteToWideChar
GetLastError
GetVersionExW
ExitProcess
GetCurrentProcess
GetStartupInfoW
GetCommandLineW
GetModuleFileNameW
GetCurrentProcessId
FreeLibrary
InterlockedExchange
SwitchToThread
LoadLibraryW
GetProcAddress
InterlockedCompareExchange
lstrlenW
GetModuleHandleW
lstrcmpiW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
DeleteCriticalSection
InitializeCriticalSection
HeapSetInformation
IsDebuggerPresent
OpenEventW
LocalFree
FormatMessageW
ReleaseActCtx
CreateActCtxW
ActivateActCtx
DeactivateActCtx
TerminateProcess
CreateTimerQueueTimer
FindFirstFileW
FindClose
OpenProcess
LocalAlloc
OutputDebugStringW
GetTempPathW
GetTempFileNameW
CreateFileW
WriteFile
GetNativeSystemInfo
GetEnvironmentVariableW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
FindResourceExW
GetProcessHeap
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
SearchPathW
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
LCMapStringW
LCMapStringA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetThreadAffinityMask
Toolhelp32ReadProcessMemory
RemoveDirectoryA
GetProcessHeaps
SetTimerQueueTimer
OpenWaitableTimerA
BuildCommDCBA
ReadDirectoryChangesW
GetBinaryType
LocalUnlock
GetNumberFormatW
GetHandleInformation
GetPrivateProfileSectionW
OpenMutexA
FileTimeToDosDateTime
GetAtomNameW
DeleteFileA
GetPriorityClass
DosDateTimeToFileTime
GlobalFindAtomW
CreateDirectoryA
GlobalDeleteAtom
UnlockFileEx
DeleteTimerQueueEx
DnsHostnameToComputerNameA
GetDiskFreeSpaceExA
GetProfileSectionA
FindFirstChangeNotificationA
IsBadStringPtrA
GetConsoleTitleW
GetCommMask
EnumCalendarInfoExA
FatalAppExitA
lstrcpyn
GetProfileStringA
CreateTapePartition
GetCommTimeouts
GetCurrentThread
ReleaseSemaphore
VirtualQuery
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
RtlUnwind
ExitThread
CreateThread
SetCurrentDirectoryW
GetCurrentDirectoryW
SetEndOfFile
ReadFile
GetFileSize
lstrlenA
lstrcmpW
WritePrivateProfileStringW
WinExec
WaitNamedPipeW
WaitForMultipleObjectsEx
WaitForMultipleObjects
VirtualQueryEx
VirtualProtect
VerSetConditionMask
VerifyVersionInfoW
UnlockFile
TryEnterCriticalSection
TerminateThread
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SuspendThread
SetThreadPriority
SetFileTime
SetFileAttributesW
SetErrorMode
ResumeThread
RemoveDirectoryW
QueryPerformanceFrequency
QueryDosDeviceW
MulDiv
MoveFileExA
MoveFileW
LockResource
LockFile
LocalFileTimeToFileTime
IsBadReadPtr
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalMemoryStatus
GlobalHandle
GlobalLock
GlobalFree
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExA
GetUserDefaultLangID
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetThreadTimes
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempFileNameA
GetSystemTime
GetSystemTimes
GetSystemDirectoryW
GetStringTypeExA
GetStringTypeExW
GetShortPathNameW
GetPrivateProfileStringW
GetModuleHandleA
GetLogicalDriveStringsW
GetLocalTime
GetFullPathNameW
GetFileTime
GetFileInformationByHandle
GetFileAttributesW
GetExitCodeThread
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetComputerNameExW
GetComputerNameA
GetComputerNameW
GetCPInfoExW
FreeResource
FindNextFileW
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
EnumSystemLocalesW
EnumResourceNamesW
EnumDateFormatsW
EnumCalendarInfoW
DuplicateHandle
DisconnectNamedPipe
DeleteFileW
CreatePipe
CreateNamedPipeW
CreateMutexW
CreateEventA
CreateDirectoryW
CopyFileW
ConnectNamedPipe
CompareStringA
CompareFileTime
Beep
user32
PostMessageW
MessageBoxA
PeekMessageW
MsgWaitForMultipleObjects
LoadStringW
DispatchMessageW
TranslateMessage
GetMessageW
CharNextW
WaitForInputIdle
MessageBeep
MessageBoxW
PostQuitMessage
EnableWindow
RealChildWindowFromPoint
CopyAcceleratorTableA
ArrangeIconicWindows
CreateIcon
ChildWindowFromPointEx
DialogBoxParamW
GetMenuStringA
DdeCreateDataHandle
GetPriorityClipboardFormat
CallNextHookEx
TranslateAcceleratorW
IsCharUpperA
LoadStringA
GetProcessDefaultLayout
GetDoubleClickTime
OpenDesktopA
DdeFreeStringHandle
EnumDesktopsA
WINNLSGetEnableStatus
IsCharAlphaNumericA
ChangeMenuA
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
keybd_event
WindowFromPoint
WinHelpW
WaitMessage
ValidateRect
UpdateWindow
UnregisterHotKey
UnregisterClassW
UnionRect
UnhookWindowsHookEx
TranslateMDISysAccel
TrackPopupMenu
ToUnicode
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExA
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardViewer
SetClipboardData
SetCaretPos
SetCapture
SetActiveWindow
SendNotifyMessageW
SendMessageTimeoutW
SendMessageA
SendMessageW
SendDlgItemMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterHotKey
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostMessageA
PeekMessageA
OpenDesktopW
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjectsEx
MoveWindow
MessageBoxIndirectA
MessageBoxIndirectW
MessageBoxExA
MessageBoxExW
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadKeyboardLayoutW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsMenu
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericW
IsCharAlphaW
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetScrollBarInfo
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameW
GetClipboardData
GetClientRect
GetClassNameA
GetClassNameW
GetClassInfoExW
GetClassInfoW
GetCaretPos
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndMenu
EndDeferWindowPos
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExA
DrawTextExW
DrawTextA
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DrawCaption
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DeferWindowPos
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateCaret
CreateAcceleratorTableW
CountClipboardFormats
CopyImage
CopyIcon
CloseDesktop
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharUpperW
CharPrevW
CharLowerBuffW
CharLowerW
ChangeClipboardChain
CallWindowProcW
BringWindowToTop
BeginPaint
BeginDeferWindowPos
CharNextA
CharLowerBuffA
CharUpperBuffA
CharUpperA
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
wsprintfA
DdeCmpStringHandles
DdeQueryStringA
DdeCreateStringHandleA
DdeGetLastError
DdeFreeDataHandle
DdeUnaccessData
DdeAccessData
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeSetUserHandle
DdeQueryConvInfo
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeA
LoadIconA
gdi32
CreateHatchBrush
PlgBlt
GetCharWidth32A
GetLogColorSpaceA
GdiInitializeLanguagePack
SelectPalette
GetTextExtentPoint32W
EngCreateBitmap
GdiGetCharDimensions
PolyPolyline
GdiEntry5
EnumFontsW
FrameRgn
EngCopyBits
SetICMProfileA
GdiConvertFont
GdiSetBatchLimit
GdiAlphaBlend
FixBrushOrgEx
GdiReleaseLocalDC
UnrealizeObject
TextOutA
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWorldTransform
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetMapMode
SetGraphicsMode
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
PtInRegion
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
OffsetWindowOrgEx
OffsetRgn
OffsetClipRgn
MoveToEx
ModifyWorldTransform
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWorldTransform
GetWindowOrgEx
GetWindowExtEx
GetWinMetaFileBits
GetViewportOrgEx
GetViewportExtEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32A
GetTextExtentExPointA
GetTextExtentExPointW
GetTextColor
GetTextCharacterExtra
GetTextAlign
GetSystemPaletteEntries
GetStretchBltMode
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetOutlineTextMetricsW
GetObjectW
GetNearestPaletteIndex
GetNearestColor
GetMapMode
GetGraphicsMode
GetGlyphOutlineW
GetFontLanguageInfo
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetCurrentObject
GetClipRgn
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FillRgn
ExtTextOutA
ExtTextOutW
ExtFloodFill
ExtCreatePen
ExcludeClipRect
EnumFontFamiliesExA
EnumFontFamiliesExW
EnumFontFamiliesW
EnumEnhMetaFile
EndPath
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseEnhMetaFile
Chord
BitBlt
BeginPath
ArcTo
Arc
AngleArc
AbortDoc
GetCharacterPlacementW
GetCharacterPlacementA
comdlg32
PrintDlgW
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
CreateRestrictedToken
CreateProcessAsUserW
EqualSid
CreateWellKnownSid
LsaOpenPolicy
LsaLookupPrivilegeValue
LsaNtStatusToWinError
LsaClose
CopySid
GetKernelObjectSecurity
GetSecurityDescriptorDacl
SetTokenInformation
GetAclInformation
GetLengthSid
InitializeAcl
AddAccessAllowedAce
GetAce
AddAce
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
GetSidSubAuthority
GetSidSubAuthorityCount
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
TraceEvent
SetSecurityDescriptorDacl
RegUnLoadKeyW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExA
RegOpenKeyExA
RegLoadKeyW
RegFlushKey
RegConnectRegistryW
InitializeSecurityDescriptor
GetUserNameW
RegOpenKeyA
shell32
CommandLineToArgvW
ShellExecuteExW
SHGetFolderPathW
ShellExecuteW
SHGetMalloc
SHGetDiskFreeSpaceExW
DragQueryFileA
SHGetSpecialFolderLocation
SHChangeNotify
SHGetPathFromIDListA
ShellExecuteA
DragQueryFileW
WOWShellExecute
SHEmptyRecycleBinA
ExtractIconA
ExtractIconExW
ShellAboutA
SHGetInstanceExplorer
SHInvokePrinterCommandA
SHPathPrepareForWriteA
ExtractIconW
ExtractAssociatedIconExW
SHLoadInProc
DragQueryPoint
SHGetFolderLocation
SHGetSpecialFolderPathA
SHGetDesktopFolder
DoEnvironmentSubstA
ExtractAssociatedIconW
SHGetFileInfoW
Shell_NotifyIconW
SHAppBarMessage
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHBrowseForFolderW
ole32
CoMarshalInterThreadInterfaceInStream
CoRevokeClassObject
CoReleaseMarshalData
CreateBindCtx
CLSIDFromProgID
CoTaskMemAlloc
CoUninitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoInitialize
CoRegisterClassObject
CreateStreamOnHGlobal
OleRegEnumVerbs
IsAccelerator
ReleaseStgMedium
OleDraw
OleSetMenuDescriptor
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
ProgIDFromCLSID
StringFromCLSID
CoLockObjectExternal
CoDisconnectObject
CoGetClassObject
IsEqualGUID
shlwapi
PathFindExtensionW
AssocQueryStringW
StrStrIA
StrCmpNIA
StrCmpNW
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17
msvcrt
memset
memcpy
Sections
.txt Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 245B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ