Static task
static1
Behavioral task
behavioral1
Sample
44491.6090605324.dll
Resource
win7-20220414-en
General
-
Target
44491.6090605324.dat
-
Size
890KB
-
MD5
fdc89b23e17d46173806407132b2903c
-
SHA1
e425a2d4cd89cb995a5fbf5e9b6671be8c51774f
-
SHA256
95928b331e9942e4709b41ec8b59eb6f9e068f53ef2eeb15009feafd4ff5138d
-
SHA512
f2dc346c36a879133cefb2ab5df55c1dcab5287630ccebf70d0baa043b65a2a64698f4083b0c2c8f9f7f83612ac0f3d277b120540d828d99ac3581068b007cda
-
SSDEEP
24576:7vmCkF3miQH9ZfSCFEz8uViMKvb/o2ggJcWMeQRqg:7vmP3m1jSCFMKvjjXJcl9qg
Malware Config
Signatures
Files
-
44491.6090605324.dat.dll windows x86
6d9051ac3c696d4a844cda984bd4afdd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadFile
ReadConsoleW
OutputDebugStringW
CreateFileW
GetConsoleCP
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
CloseHandle
WriteConsoleW
VirtualProtectEx
TlsAlloc
GetSystemDirectoryA
OpenMutexA
FindClose
GetEnvironmentVariableA
FindNextFileA
FindFirstFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
DecodePointer
user32
GetFocus
ShowScrollBar
GetKeyNameTextA
CallWindowProcA
SetFocus
SetCursor
GetDlgItemInt
AppendMenuA
SetDlgItemInt
GetWindowTextLengthA
InsertMenuItemA
RegisterClassExA
GetCursorPos
GetClassInfoExA
gdi32
SetMapMode
DeleteDC
CreateDCA
CreatePen
GetObjectA
DeleteObject
DPtoLP
rasapi32
RasEnumConnectionsA
RasGetConnectStatusA
tapi32
lineClose
lineAccept
lineNegotiateAPIVersion
lineInitializeExA
lineTranslateAddressA
lineHold
lineOpenA
clusapi
EvictClusterNode
CreateClusterResourceType
EvictClusterNodeEx
CreateClusterResource
CreateClusterGroup
DeleteClusterResource
CreateClusterNotifyPort
DeleteClusterGroup
DeleteClusterResourceType
Sections
.text Size: 349KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 465KB - Virtual size: 465KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ