Static task
static1
Behavioral task
behavioral1
Sample
42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d.dll
Resource
win10v2004-20220414-en
General
-
Target
42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d
-
Size
136KB
-
MD5
dda7f3bb9dee24e6e2564ed656f1bf64
-
SHA1
e1ff05e4be55cae9a5d2035f40e923bbdda4b90c
-
SHA256
42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d
-
SHA512
b832c2967366b62ccdb6d14f9ab22ce9b42862a2261aefd21bdc43bb1c8d2938ba91e85cd9f94a48a721a220df202866635f7c2dd20a9faa528eb1484fa77753
-
SSDEEP
1536:ld8MIMZT8M4FWSclvu4kBVW9phaLRgOzl3OZdmzZZXKCCJns5WbKqQ:lybMF8h01VgVo8WOzZkqZZ6CC7
Malware Config
Signatures
Files
-
42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d.dll windows x86
88fc603201b4d2a2333b413c4e8e123e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleExW
AreFileApisANSI
GetConsoleMode
GetTempPathA
GetCurrentThread
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
HeapSize
PeekNamedPipe
SetCurrentDirectoryW
ExitProcess
HeapReAlloc
GetDriveTypeW
FindFirstFileExW
FileTimeToLocalFileTime
EncodePointer
GetSystemTimeAsFileTime
IsDebuggerPresent
ReadConsoleW
GetConsoleCP
SetFilePointer
FatalAppExitA
GetStringTypeW
GetCPInfo
GetOEMCP
InterlockedIncrement
InterlockedDecrement
CloseHandle
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
lstrlenW
CreateFileMappingW
OpenFileMappingW
FreeLibrary
GetProcAddress
GlobalAlloc
GlobalFree
GetCurrentProcess
GetLastError
GetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FormatMessageW
SetEnvironmentVariableW
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
OutputDebugStringW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFileAttributesW
GetFileAttributesExW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
GetProcessTimes
OpenProcess
SetLastError
ReadProcessMemory
GetFileSizeEx
FindClose
GetSystemTime
FileTimeToSystemTime
GetFullPathNameW
CreateFileW
FindFirstFileW
FindNextFileW
CopyFileW
FlushInstructionCache
RaiseException
GetCurrentThreadId
LoadResource
SizeofResource
MulDiv
lstrcmpW
lstrcmpiW
LoadLibraryExW
GetCommandLineW
FindResourceW
CompareStringW
GetVersionExW
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
GetFileInformationByHandle
WriteFile
ReadFile
CreateMutexW
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeCriticalSection
Sleep
GlobalLock
GlobalUnlock
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetSystemDirectoryA
RtlUnwind
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
InterlockedExchange
SetConsoleCtrlHandler
FlushFileBuffers
DebugBreak
SetFilePointerEx
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
IsValidCodePage
GetACP
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
SetEndOfFile
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameA
lstrlenA
LoadLibraryA
user32
GetWindowContextHelpId
LoadCursorW
GetTopWindow
GetFocus
GetMessageTime
PaintDesktop
GetWindowTextLengthW
GetDesktopWindow
InSendMessage
IsWindow
GetMenu
GetQueueStatus
gdi32
SaveDC
GetROP2
GetStockObject
CloseEnhMetaFile
EndPage
advapi32
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyA
ole32
CoRegisterMessageFilter
Sections
.pop Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ