text
Static task
static1
Behavioral task
behavioral1
Sample
21a77e00627ddd6541f559651be67482ce29b079969379038b5ea5424c275cab.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
21a77e00627ddd6541f559651be67482ce29b079969379038b5ea5424c275cab.dll
Resource
win10v2004-20220414-en
General
-
Target
21a77e00627ddd6541f559651be67482ce29b079969379038b5ea5424c275cab
-
Size
141KB
-
MD5
38bd1d49f88201a9a6a92ae3f65559c0
-
SHA1
010847f30975fbac9a45ffc6e70ed640614e4852
-
SHA256
21a77e00627ddd6541f559651be67482ce29b079969379038b5ea5424c275cab
-
SHA512
4ff916f7ea78fbd0c0fbb663dc53d8a6060fae819a7f0da09d114d832dde1634943cb603787954fdb0a5fbae20bcc0a2d29157f7b7a1139c8f41424a655db858
-
SSDEEP
3072:CoXnIzY4t5wotjf6VVD2fghuM8/GlAALeHy3dYZGcZhwn:CoiYoy4inD2fDMCGlTOqYUcXwn
Malware Config
Signatures
Files
-
21a77e00627ddd6541f559651be67482ce29b079969379038b5ea5424c275cab.dll windows x86
abfafdcbb21dd30491dc669acc1b107f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
CreateProcessW
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThread
FindNextFileW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetLogicalDrives
GetCurrentProcess
InterlockedDecrement
GetTickCount
LoadLibraryA
FreeLibrary
GetSystemDirectoryW
lstrlenA
LoadLibraryW
GetVolumeNameForVolumeMountPointA
GetUserDefaultLangID
GetWindowsDirectoryA
GetLocaleInfoA
FindClose
FindFirstFileW
MultiByteToWideChar
WideCharToMultiByte
DisableThreadLibraryCalls
WaitForSingleObject
CreateThread
Sleep
GetSystemDefaultLangID
SetUnhandledExceptionFilter
SetErrorMode
GlobalAddAtomA
AddAtomA
FindAtomA
GlobalFindAtomA
OpenEventA
LocalFree
CreateEventA
MulDiv
GetUserDefaultUILanguage
GetVersionExA
ExitProcess
GetModuleFileNameW
FlushFileBuffers
SetFileTime
GetSystemTimeAsFileTime
GetLastError
SetFilePointer
ReadFile
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
MoveFileExW
WriteFile
GetFileSizeEx
CreateFileW
CloseHandle
VirtualFree
VirtualAlloc
GetDriveTypeW
RtlUnwind
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStringTypeW
LCMapStringW
HeapDestroy
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedIncrement
GetCPInfo
GetModuleHandleW
IsProcessorFeaturePresent
HeapReAlloc
HeapSize
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetStdHandle
RaiseException
GetCommandLineA
GetCurrentThreadId
HeapFree
HeapAlloc
VirtualQuery
user32
SystemParametersInfoW
FrameRect
FillRect
ReleaseDC
GetDC
GetSystemMetrics
DrawTextW
gdi32
CreateCompatibleDC
GetDIBits
GetObjectA
SetBkMode
SetTextColor
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
CreateFontA
DeleteObject
GetDeviceCaps
DeleteDC
advapi32
CryptDestroyHash
AccessCheck
MapGenericMask
DuplicateToken
OpenThreadToken
GetFileSecurityW
CryptGetKeyParam
CryptSetHashParam
CryptHashData
SetTokenInformation
OpenProcessToken
CryptCreateHash
CryptGetHashParam
RegSetValueExA
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
AllocateAndInitializeSid
RegCloseKey
RegOpenKeyExA
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
CryptEncrypt
CryptSetKeyParam
CryptImportKey
CryptDestroyKey
shell32
ShellExecuteW
SHGetFolderPathW
ole32
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoCreateInstance
oleaut32
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantClear
wininet
HttpSendRequestA
HttpEndRequestA
HttpQueryInfoA
InternetWriteFile
HttpSendRequestExA
HttpAddRequestHeadersA
InternetQueryOptionA
HttpOpenRequestA
InternetCloseHandle
InternetCrackUrlA
InternetOpenA
InternetSetOptionA
InternetReadFile
InternetConnectA
mpr
WNetEnumResourceW
WNetAddConnection2W
WNetCloseEnum
WNetOpenEnumW
netapi32
DsRoleFreeMemory
DsRoleGetPrimaryDomainInformation
urlmon
ObtainUserAgentString
Exports
Exports
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.cdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ