mciCommsmon2
Static task
static1
Behavioral task
behavioral1
Sample
05ae2725bbcfdc88b1ca5e28387648298632ac0beb12d621947112a9a5b0d1d4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
05ae2725bbcfdc88b1ca5e28387648298632ac0beb12d621947112a9a5b0d1d4.dll
Resource
win10v2004-20220812-en
General
-
Target
05ae2725bbcfdc88b1ca5e28387648298632ac0beb12d621947112a9a5b0d1d4
-
Size
116KB
-
MD5
be69a8a6838fa6f23d28150a9a59d2a4
-
SHA1
b7fc13cd33c7ec0684bd760273f4eaaaf456bae9
-
SHA256
05ae2725bbcfdc88b1ca5e28387648298632ac0beb12d621947112a9a5b0d1d4
-
SHA512
a88881e0a355bae4c0c8897c4a79f8d8bb4bc32b196aa6a3a2d17b8814ba18d20bce18a06de84c0139b273d748b7266743248f203e85e68860e6b3417d1feb4e
-
SSDEEP
1536:ISI1i6rH0XOrt6JLZYiP/9A97fDuy4pu74LsOkuf8Tfd/LF+ZMhjbYt2V64RId:qHoQsJKivy7jjuf8Tfd/4Mhk2Vo
Malware Config
Signatures
Files
-
05ae2725bbcfdc88b1ca5e28387648298632ac0beb12d621947112a9a5b0d1d4.dll windows x86
7fe4d14fa3d48ad42fca607b669969b0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
UnmapViewOfFile
WaitForSingleObject
GetCommandLineA
GetTickCount
lstrlenW
GetModuleHandleA
lstrlenA
MapViewOfFile
GetModuleFileNameA
InterlockedCompareExchange
CopyFileA
LeaveCriticalSection
CreateProcessA
GetProcAddress
ExitProcess
ReleaseMutex
GetLastError
SetLastError
EnterCriticalSection
LocalFree
Sleep
InterlockedIncrement
CloseHandle
OpenEventA
InterlockedDecrement
CreateEventA
CreateDirectoryA
ole32
CoCreateGuid
CoUninitialize
OleCreate
CreateBindCtx
OleSetContainedObject
CoInitialize
user32
PostMessageA
SetWindowLongA
TranslateMessage
SetTimer
GetMessageA
GetClassNameA
PostQuitMessage
SendMessageA
GetWindowLongA
DestroyWindow
GetParent
RegisterWindowMessageA
CreateWindowExA
KillTimer
GetSystemMetrics
DefWindowProcA
FindWindowA
DispatchMessageA
oleaut32
SysFreeString
SysAllocString
SysAllocStringLen
shlwapi
UrlUnescapeW
StrStrIW
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
Exports
Exports
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ