Static task
static1
Behavioral task
behavioral1
Sample
f71d14084f5b22dc41223db248a96c27ca54f9ae0582ac9d6dc0a7d2b13728ac.dll
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
f71d14084f5b22dc41223db248a96c27ca54f9ae0582ac9d6dc0a7d2b13728ac.dll
Resource
win10v2004-20220721-en
General
-
Target
f71d14084f5b22dc41223db248a96c27ca54f9ae0582ac9d6dc0a7d2b13728ac
-
Size
174KB
-
MD5
227ddb5f8b75f0c253e466e0752f1d97
-
SHA1
e5361dbf2218d41e577bfff6355125bdda0c08db
-
SHA256
f71d14084f5b22dc41223db248a96c27ca54f9ae0582ac9d6dc0a7d2b13728ac
-
SHA512
108a06fcc33ae5b2a024a84f861f873efbd0cadffa8eddd575e1f3392f2ae2914aef253d3a7b2bfa445c61b83f9ceaf6224880d39c43d3bdfd0b3c5fa9b01d02
-
SSDEEP
3072:T22Y6q69egVFRUQ1uSQfcbULmWuqOpkvB0iW:JHqE7H1uSQKPqOpK0i
Malware Config
Signatures
Files
-
f71d14084f5b22dc41223db248a96c27ca54f9ae0582ac9d6dc0a7d2b13728ac.dll windows x86
7b150d64dd5bb66054f6c55e978641af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
GetDateFormatW
ResetEvent
QueryPerformanceCounter
SetEvent
GetCurrentProcess
OpenEventW
ResumeThread
WaitForSingleObject
DuplicateHandle
WriteFile
GetLastError
GetExitCodeThread
CreateFileW
MoveFileW
lstrlenA
ReadFile
Sleep
GetFileSize
CreateEventW
GetLocaleInfoW
CloseHandle
GetLocalTime
LoadLibraryW
GetWindowsDirectoryW
FormatMessageW
CreateProcessW
LocalFree
FindFirstFileW
CopyFileW
FindClose
SetLastError
CreateDirectoryW
lstrlenW
GetSystemDirectoryW
GetTempPathW
GetDriveTypeW
GetFileTime
GetUserDefaultLCID
ExpandEnvironmentStringsW
GetPrivateProfileStringW
GetFileInformationByHandle
GetFileAttributesA
FileTimeToDosDateTime
GetSystemInfo
CreateFileA
WideCharToMultiByte
FileTimeToLocalFileTime
lstrcmpiW
GetTempFileNameW
GetFileAttributesW
GetProcAddress
LocalAlloc
GetModuleHandleW
GetStartupInfoW
DeleteFileW
ExitProcess
GetTickCount
LoadLibraryA
CreateDirectoryExA
GlobalFree
SetFileAttributesW
FindNextChangeNotification
BackupRead
ScrollConsoleScreenBufferW
WriteProfileSectionW
GetComputerNameA
GetCPInfoExW
GetDiskFreeSpaceExW
TlsAlloc
ConnectNamedPipe
HeapReAlloc
FillConsoleOutputCharacterW
ResetWriteWatch
FindFirstChangeNotificationA
FlushFileBuffers
TlsSetValue
TlsGetValue
GetStringTypeW
VirtualQuery
VirtualProtect
GetSystemTimeAsFileTime
GetCPInfo
ExitThread
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetStringTypeExW
GetStringTypeExA
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetProcessHeap
HeapSize
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
SetConsoleCtrlHandler
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
TlsFree
GetCurrentThread
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
HeapCreate
WriteConsoleW
SetStdHandle
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
FatalAppExitA
GetStdHandle
GetModuleFileNameA
GetStringTypeA
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
InitializeCriticalSection
InterlockedCompareExchange
FlushInstructionCache
InterlockedDecrement
GetVersionExW
lstrcmpW
lstrcpyW
InterlockedIncrement
FindNextFileW
GetFullPathNameW
SetFilePointer
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileIntA
GetPrivateProfileStringA
RaiseException
GetCurrentThreadId
OutputDebugStringW
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
TerminateProcess
CreateMutexW
SetCurrentDirectoryW
lstrcpynW
GetCurrentDirectoryW
lstrcpyA
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateThread
GetUserDefaultUILanguage
GlobalAddAtomW
MulDiv
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
SetSystemPowerState
GetDiskFreeSpaceW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WaitForMultipleObjects
GetCommandLineW
SetFileTime
GetEnvironmentStringsW
CreatePipe
GlobalSize
MoveFileExW
GetVersion
SetThreadExecutionState
ReleaseSemaphore
CreateSemaphoreW
DeleteCriticalSection
GetCurrentProcessId
user32
IsWindow
GetWindowTextLengthW
GetFocus
CheckDlgButton
SetActiveWindow
SetDlgItemInt
SetDlgItemTextW
GetDlgItemTextW
IsDlgButtonChecked
DrawTextW
FillRect
DrawFocusRect
InflateRect
CopyRect
SetFocus
SetForegroundWindow
GetWindow
GetParent
SetScrollInfo
GetScrollPos
ShowWindow
SetWindowPos
GetSystemMetrics
GetWindowRect
GetClientRect
SetClassLongW
GetDlgItem
IsWindowVisible
SetWindowLongW
GetWindowLongW
EndPaint
BeginPaint
GetWindowTextW
GetDlgCtrlID
DefWindowProcW
UpdateWindow
MessageBoxW
DestroyWindow
CreateDialogParamW
MoveWindow
IsWindowUnicode
CreateWindowExW
GetMenu
GetAsyncKeyState
CallWindowProcW
DestroyMenu
TrackPopupMenu
IsClipboardFormatAvailable
AppendMenuW
CreatePopupMenu
wsprintfW
GetPropW
SetPropW
GetClassLongW
WinHelpW
SetCursor
ChildWindowFromPoint
TranslateMessage
SendMessageW
PeekMessageW
EndDialog
DispatchMessageW
SendDlgItemMessageW
ReleaseDC
GetDC
IsDialogMessageW
FindWindowW
CheckMenuItem
SetWindowTextW
EnableWindow
LoadStringW
GetSubMenu
InvalidateRect
GetClassInfoExW
LoadIconW
RegisterClassExW
LoadCursorW
GetSysColor
GetDesktopWindow
DialogBoxParamW
IsZoomed
GetMessagePos
CascadeChildWindows
SetClassLongA
ChildWindowFromPointEx
OemToCharBuffW
DrawTextA
GetTabbedTextExtentW
CloseClipboard
MessageBeep
IsWindowEnabled
CloseWindow
DdeQueryConvInfo
SetScrollPos
DrawIconEx
RemoveMenu
CloseDesktop
DrawFrame
PostThreadMessageA
RegisterClassExA
UnloadKeyboardLayout
FreeDDElParam
GetClassInfoW
DdeConnectList
TranslateAcceleratorA
AnyPopup
DdeQueryStringA
BeginDeferWindowPos
GetKeyboardLayoutNameW
OemKeyScan
CharToOemA
LoadImageW
DrawTextExA
LoadMenuW
GetMenuCheckMarkDimensions
BroadcastSystemMessageA
UnionRect
LoadImageA
KillTimer
ChangeClipboardChain
MapWindowPoints
MonitorFromWindow
DeleteMenu
GetMenuStringW
IntersectRect
RegisterHotKey
SetClipboardViewer
UnregisterHotKey
GetMenuItemRect
RegisterClipboardFormatW
EqualRect
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
UpdateLayeredWindow
ExitWindowsEx
EnableMenuItem
SetClipboardData
EmptyClipboard
OpenClipboard
GetIconInfo
PrivateExtractIconsW
ModifyMenuW
SetTimer
GetClipboardData
SetMenuInfo
InsertMenuW
GetMenuDefaultItem
GetWindowDC
DrawEdge
DrawStateW
GetMenuInfo
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
OffsetRect
SetRect
MonitorFromPoint
GetMonitorInfoW
ClientToScreen
PostMessageW
CharNextA
BringWindowToTop
DrawMenuBar
IsIconic
PtInRect
GetActiveWindow
PostQuitMessage
CharNextW
GetMessageW
IsRectEmpty
ScreenToClient
SendMessageTimeoutW
GetCursorPos
DestroyIcon
LoadBitmapW
SystemParametersInfoW
SetRectEmpty
GetMenuItemID
UnregisterClassA
LoadStringA
gdi32
ModifyWorldTransform
GetCharWidthInfo
EngTextOut
GdiGetBatchLimit
GetColorAdjustment
UpdateColors
RemoveFontResourceExW
GetGlyphOutlineW
GetNearestPaletteIndex
CreateDCW
GdiRealizationInfo
FloodFill
GetCharWidthI
GetWindowExtEx
SetPaletteEntries
CreateICW
ExtTextOutW
EngUnlockSurface
GetICMProfileA
EudcLoadLinkW
GetCurrentObject
StartPage
GdiConvertEnhMetaFile
EngDeleteClip
SetBkMode
DeleteObject
SetTextColor
GetObjectW
CreateFontW
BitBlt
GetClipBox
CreateCompatibleDC
SetBkColor
Rectangle
CreateCompatibleBitmap
GetStockObject
CreatePen
ExcludeClipRect
DeleteDC
CreateFontIndirectW
SelectObject
CreateSolidBrush
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
LsaClose
RegQueryValueExA
RegOpenKeyExA
OpenEventLogW
BackupEventLogW
CloseEventLog
LsaOpenPolicy
LsaQueryInformationPolicy
LsaFreeMemory
RegCloseKey
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
RegCreateKeyW
RegSetValueExW
RegFlushKey
RegOpenKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
OpenProcessToken
LookupPrivilegeValueW
RegQueryInfoKeyW
AdjustTokenPrivileges
RegOpenKeyA
shell32
ShellAboutW
SHGetSpecialFolderLocation
SHPathPrepareForWriteW
ShellExecuteExW
ExtractIconExW
SHIsFileAvailableOffline
ShellExecuteW
Shell_NotifyIconW
DragFinish
DragQueryFileW
ShellExecuteA
SHGetFolderPathW
SHBrowseForFolderW
SHOpenFolderAndSelectItems
SHGetFileInfoW
SHParseDisplayName
SHBindToParent
SHGetPathFromIDListW
SHAppBarMessage
SHGetMalloc
SHCreateDirectoryExW
ole32
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoInitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemRealloc
OleUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
RevokeDragDrop
CLSIDFromProgID
RegisterDragDrop
ReleaseStgMedium
CoInitializeEx
shlwapi
StrRStrIA
ColorRGBToHLS
ColorHLSToRGB
PathCombineW
PathAppendW
PathFindFileNameW
PathIsURLW
PathFileExistsW
StrCpyW
StrCpyNW
PathRemoveFileSpecW
PathFindExtensionA
PathIsURLA
PathIsDirectoryW
PathFindExtensionW
PathRemoveExtensionW
StrStrIA
comctl32
ImageList_GetIcon
_TrackMouseEvent
ImageList_LoadImageW
ImageList_Destroy
ImageList_Draw
InitCommonControlsEx
ImageList_AddMasked
Sections
.txt Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ