Static task
static1
Behavioral task
behavioral1
Sample
c1cbc33ffd320ea7657a732db883c989370e501fd902dcabfc8a1924b9e4d16b.dll
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
c1cbc33ffd320ea7657a732db883c989370e501fd902dcabfc8a1924b9e4d16b.dll
Resource
win10v2004-20220722-en
General
-
Target
c1cbc33ffd320ea7657a732db883c989370e501fd902dcabfc8a1924b9e4d16b
-
Size
138KB
-
MD5
ea193f350cbcdd48d5bd55e7ea934838
-
SHA1
b22ca46d1da866f4675916580cf2e8cb690f984b
-
SHA256
c1cbc33ffd320ea7657a732db883c989370e501fd902dcabfc8a1924b9e4d16b
-
SHA512
b84dec2a5a9f01d051021018e3f67fc545c11b1d3aec329e95495d411fa7d761feac66034eeea33974260b8c9974111897a51fb50bd68ec71e507d4bcdc22e65
-
SSDEEP
1536:bd8MIMZT8M4FWScld2H+uc79phaLRgOzl3OZdmzZZ/NpsCB3JDk5Wvals:bybMF8h0PZ8WOzZkqZZFpsCZfv
Malware Config
Signatures
Files
-
c1cbc33ffd320ea7657a732db883c989370e501fd902dcabfc8a1924b9e4d16b.dll windows x86
c73b4b14f415d513958b9abf0cf18767
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleExW
AreFileApisANSI
GetConsoleMode
GetTempPathA
GetCurrentThread
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
HeapSize
PeekNamedPipe
SetCurrentDirectoryW
ExitProcess
HeapReAlloc
GetDriveTypeW
FindFirstFileExW
FileTimeToLocalFileTime
EncodePointer
GetSystemTimeAsFileTime
IsDebuggerPresent
ReadConsoleW
GetConsoleCP
SetFilePointer
FatalAppExitA
GetStringTypeW
GetCPInfo
GetOEMCP
InterlockedIncrement
InterlockedDecrement
CloseHandle
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
lstrlenW
CreateFileMappingW
OpenFileMappingW
FreeLibrary
GetProcAddress
GlobalAlloc
GlobalFree
GetCurrentProcess
GetLastError
GetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FormatMessageW
SetEnvironmentVariableW
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
OutputDebugStringW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFileAttributesW
GetFileAttributesExW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
GetProcessTimes
OpenProcess
SetLastError
ReadProcessMemory
GetFileSizeEx
FindClose
GetSystemTime
FileTimeToSystemTime
GetFullPathNameW
CreateFileW
FindFirstFileW
FindNextFileW
CopyFileW
FlushInstructionCache
RaiseException
GetCurrentThreadId
LoadResource
SizeofResource
MulDiv
lstrcmpW
lstrcmpiW
LoadLibraryExW
GetCommandLineW
FindResourceW
CompareStringW
GetVersionExW
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
GetFileInformationByHandle
WriteFile
ReadFile
CreateMutexW
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeCriticalSection
Sleep
GlobalLock
GlobalUnlock
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetSystemDirectoryA
RtlUnwind
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetProcessHeap
HeapFree
HeapAlloc
QueryPerformanceCounter
InterlockedExchange
SetConsoleCtrlHandler
FlushFileBuffers
DebugBreak
SetFilePointerEx
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
IsValidCodePage
GetACP
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
SetEndOfFile
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameA
lstrlenA
LoadLibraryA
user32
GetCaretBlinkTime
IsCharAlphaW
GetDlgCtrlID
ReleaseCapture
EnumClipboardFormats
CharNextW
IsWindow
GetMessagePos
GetClipboardViewer
GetClipboardSequenceNumber
GetActiveWindow
ShowCaret
GetDialogBaseUnits
GetDC
LoadIconA
GetWindowContextHelpId
LoadCursorW
GetTopWindow
GetFocus
GetMessageTime
PaintDesktop
GetWindowTextLengthW
GetDesktopWindow
InSendMessage
GetMenu
GetQueueStatus
gdi32
CloseEnhMetaFile
GetTextCharacterExtra
SwapBuffers
UnrealizeObject
CreateSolidBrush
GetFontLanguageInfo
GetMapMode
CloseFigure
GetObjectType
WidenPath
AbortPath
FillPath
GetColorSpace
DeleteMetaFile
SaveDC
GetStockObject
GetROP2
EndPage
advapi32
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyA
ole32
CoRegisterMessageFilter
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pop Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ