Static task
static1
Behavioral task
behavioral1
Sample
a694c9081cf430f5902b818c0de821a3116cd315c0a5272bd8297655f6087f46.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
a694c9081cf430f5902b818c0de821a3116cd315c0a5272bd8297655f6087f46.dll
Resource
win10v2004-20220414-en
General
-
Target
a694c9081cf430f5902b818c0de821a3116cd315c0a5272bd8297655f6087f46
-
Size
138KB
-
MD5
f55837c70c1d870facd7cf263c0c4258
-
SHA1
ea9ed68d74a344b2f5acb52bdb2a785ff13fbd2c
-
SHA256
a694c9081cf430f5902b818c0de821a3116cd315c0a5272bd8297655f6087f46
-
SHA512
789bc3347986d20ce3744706d40ac656304466b889c9564c25ef4fbdf67aaf80c743bdd2e7540f3b35f44ebe447995797bfa5603f4ebe768ac20084a69227222
-
SSDEEP
1536:Sd8MIMZT8M4FWSclUFRzFO9phaLRgOzl3OZdmzZZ/NFS46Glvs5W1swQ0:SybMF8h0qFbg8WOzZkqZZFFS4d31sR
Malware Config
Signatures
Files
-
a694c9081cf430f5902b818c0de821a3116cd315c0a5272bd8297655f6087f46.dll windows x86
0909c9d55c37a2f2c1a51af9594db5be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleExW
AreFileApisANSI
GetConsoleMode
GetTempPathA
GetCurrentThread
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
HeapSize
PeekNamedPipe
SetCurrentDirectoryW
ExitProcess
HeapReAlloc
GetDriveTypeW
FindFirstFileExW
FileTimeToLocalFileTime
EncodePointer
GetSystemTimeAsFileTime
IsDebuggerPresent
ReadConsoleW
GetConsoleCP
SetFilePointer
FatalAppExitA
GetStringTypeW
GetCPInfo
GetOEMCP
InterlockedIncrement
InterlockedDecrement
CloseHandle
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
lstrlenW
CreateFileMappingW
OpenFileMappingW
FreeLibrary
GetProcAddress
GlobalAlloc
GlobalFree
GetCurrentProcess
GetLastError
GetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FormatMessageW
SetEnvironmentVariableW
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
OutputDebugStringW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFileAttributesW
GetFileAttributesExW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
GetProcessTimes
OpenProcess
SetLastError
ReadProcessMemory
GetFileSizeEx
FindClose
GetSystemTime
FileTimeToSystemTime
GetFullPathNameW
CreateFileW
FindFirstFileW
FindNextFileW
CopyFileW
FlushInstructionCache
RaiseException
GetCurrentThreadId
LoadResource
SizeofResource
MulDiv
lstrcmpW
lstrcmpiW
LoadLibraryExW
GetCommandLineW
FindResourceW
CompareStringW
GetVersionExW
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
GetFileInformationByHandle
WriteFile
ReadFile
CreateMutexW
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeCriticalSection
Sleep
GlobalLock
GlobalUnlock
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetSystemDirectoryA
RtlUnwind
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
InterlockedExchange
SetConsoleCtrlHandler
FlushFileBuffers
DebugBreak
SetFilePointerEx
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
IsValidCodePage
GetACP
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
SetEndOfFile
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameA
lstrlenA
LoadLibraryA
user32
LoadCursorW
GetCaretBlinkTime
IsCharAlphaW
GetDlgCtrlID
ReleaseCapture
EnumClipboardFormats
CharNextW
IsWindow
GetMessagePos
GetClipboardViewer
GetClipboardSequenceNumber
GetActiveWindow
ShowCaret
GetDialogBaseUnits
GetDC
LoadIconA
GetWindowContextHelpId
GetTopWindow
GetFocus
GetMessageTime
PaintDesktop
GetWindowTextLengthW
GetDesktopWindow
InSendMessage
GetMenu
GetQueueStatus
gdi32
CloseEnhMetaFile
GetTextCharacterExtra
SwapBuffers
UnrealizeObject
CreateSolidBrush
GetFontLanguageInfo
GetMapMode
CloseFigure
GetObjectType
WidenPath
AbortPath
FillPath
GetColorSpace
DeleteMetaFile
SaveDC
GetROP2
GetStockObject
EndPage
advapi32
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyA
RegQueryValueExA
ole32
CoRegisterMessageFilter
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pop Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ