Latefinal
Static task
static1
Behavioral task
behavioral1
Sample
71d9e57d89e3860945c8387a30003019db562b400b8622fa016269344179193e.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
71d9e57d89e3860945c8387a30003019db562b400b8622fa016269344179193e.dll
Resource
win10v2004-20220414-en
General
-
Target
71d9e57d89e3860945c8387a30003019db562b400b8622fa016269344179193e
-
Size
1.1MB
-
MD5
8f0ffcd74556bcc700158d38e02b00ee
-
SHA1
8e8706b6394a205eb4cb5d23dcb1f5fe5a0bafab
-
SHA256
71d9e57d89e3860945c8387a30003019db562b400b8622fa016269344179193e
-
SHA512
eab7b400a0288a725196904228d38466efa6f0a120666781dee2fae0ac34f5275eb628e7a06af73f4fefec6d18e21e972c3e5cb133541809876daa4d52ea0517
-
SSDEEP
24576:S1P3cWjpyfLloiLGJobEBk5ytn0LTy3cl7PRJFB:TRqoYBqySygRx
Malware Config
Signatures
Files
-
71d9e57d89e3860945c8387a30003019db562b400b8622fa016269344179193e.dll windows x86
947b372d8349fbaf10f6998d62219829
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
SetFileAttributesA
LoadLibraryA
OpenMutexA
GetSystemInfo
GetModuleFileNameA
VirtualProtect
GetFileTime
Sleep
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleA
GetProcessHeap
WaitForSingleObject
HeapAlloc
ExitProcess
GetLastError
GetFileAttributesA
CloseHandle
GetCurrentThreadId
GetCommandLineA
HeapValidate
IsBadReadPtr
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
CreateFileA
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
RtlUnwind
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
HeapReAlloc
VirtualAlloc
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
MultiByteToWideChar
ReadFile
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
ImageList_DragMove
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_ReplaceIcon
Exports
Exports
Sections
.text Size: 731KB - Virtual size: 730KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 9.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ