Probablewarm
Static task
static1
Behavioral task
behavioral1
Sample
f4848c59b6dab07ec39fba5dd98253fbebd65af0862157e72fa5d1cf3469d7ca.dll
Resource
win7-20220414-en
General
-
Target
f4848c59b6dab07ec39fba5dd98253fbebd65af0862157e72fa5d1cf3469d7ca
-
Size
696KB
-
MD5
a908e3261ee99c8fe331293b2fc11d6f
-
SHA1
a5e8d1183e5d816847913d3c50e1900bf5dd5186
-
SHA256
f4848c59b6dab07ec39fba5dd98253fbebd65af0862157e72fa5d1cf3469d7ca
-
SHA512
276d301fbc93ea1457d4d5036cbe48064c34ce4f81a340ee972e575a6f9c4eaf7c0930b79f2409f8a79e1fd8ccb2e48ac84dc57e028fcb3f736298a485917184
-
SSDEEP
12288:tIF3IolGhKczOV43cwFBIDJmHM0VgBCAyNwUu6k87:SF3MAcwMf+JeM0VgBCAyqUu87
Malware Config
Signatures
Files
-
f4848c59b6dab07ec39fba5dd98253fbebd65af0862157e72fa5d1cf3469d7ca.dll windows x86
4ad0740c8dad3f568f961b5d06846483
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetConsoleMode
SetFilePointer
WriteFile
HeapReAlloc
VirtualAlloc
CloseHandle
HeapSize
GetConsoleCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleFileNameA
GetSystemInfo
LoadLibraryA
VirtualProtectEx
GetProcAddress
Sleep
GetProcessHeap
HeapAlloc
FlushFileBuffers
FreeLibrary
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
GetCurrentThreadId
GetCommandLineA
GetCPInfo
RaiseException
GetLastError
HeapFree
RtlUnwind
LCMapStringA
LCMapStringW
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetModuleHandleA
user32
CallNextHookEx
SetClipboardData
CheckRadioButton
DefWindowProcA
ReleaseDC
DestroyWindow
CreateWindowExA
GetClassInfoExA
SetForegroundWindow
SendDlgItemMessageA
SendMessageA
EnumWindows
GetWindowLongA
GetClipboardData
gdi32
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
ole32
CoCreateInstance
CoUninitialize
OleInitialize
OleUninitialize
CoInitialize
shlwapi
PathIsUNCA
StrStrA
PathFindExtensionA
StrDupA
advapi32
RegOpenKeyExA
OpenProcessToken
StartServiceCtrlDispatcherA
OpenThreadToken
RegCloseKey
RegEnumKeyA
RegOpenKeyA
FreeSid
OpenSCManagerA
SetSecurityDescriptorOwner
SetServiceStatus
AllocateAndInitializeSid
QueryServiceStatus
OpenServiceA
RegCreateKeyExA
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteKeyA
RegQueryValueExA
RegisterServiceCtrlHandlerA
RegSetValueExA
SetSecurityDescriptorGroup
comctl32
_TrackMouseEvent
ord17
ImageList_DragShowNolock
ImageList_GetIcon
Exports
Exports
Sections
.text Size: 478KB - Virtual size: 477KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 183KB - Virtual size: 9.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ