Static task
static1
Behavioral task
behavioral1
Sample
0c0c7e7b8e638e6e4055e5f7d514b8eb686dd9135a9a97d122ffd8d34b3dd574.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0c0c7e7b8e638e6e4055e5f7d514b8eb686dd9135a9a97d122ffd8d34b3dd574.dll
Resource
win10v2004-20220812-en
General
-
Target
0c0c7e7b8e638e6e4055e5f7d514b8eb686dd9135a9a97d122ffd8d34b3dd574
-
Size
105KB
-
MD5
6c96bc626984c0dbad24c0840a64b46f
-
SHA1
b735ad3f7e182173b2c9eded7961233a5c34e2bf
-
SHA256
0c0c7e7b8e638e6e4055e5f7d514b8eb686dd9135a9a97d122ffd8d34b3dd574
-
SHA512
2b4568d7a089aafde453d9834df6af753882e55b7c925a4d47fd645b08f5f018c9018170f052d1429fea6c596f140bd573aa567fb18eac50d154efd5d1aad256
-
SSDEEP
1536:OCsrpx3n49uVNSwbIbFpfYi29EGRlh0UuY/BsvTD/2ZagvEq8E/My88Iou8IhZd:k3n4EVNSwb82NuYpYD/Cag8e88Ilh
Malware Config
Signatures
Files
-
0c0c7e7b8e638e6e4055e5f7d514b8eb686dd9135a9a97d122ffd8d34b3dd574.dll windows x86
f0766ef8c7e372367b33e4b5cffce77f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetACP
GetEnvironmentStrings
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
DisableThreadLibraryCalls
SetLastError
LocalAlloc
LocalFree
InterlockedExchange
Sleep
InterlockedCompareExchange
TlsFree
SetEvent
GetCurrentThread
GetSystemTime
SystemTimeToFileTime
HeapAlloc
HeapFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
CloseHandle
CancelWaitableTimer
RegisterWaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
CompareFileTime
WaitForSingleObject
FreeLibrary
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsSetValue
GetCurrentThreadId
ExitProcess
GetVersion
GetOEMCP
GetTickCount
GetCommandLineA
WaitForMultipleObjects
VirtualProtect
user32
LoadStringW
advapi32
LsaNtStatusToWinError
CryptGetUserKey
CryptGetKeyParam
CryptDestroyKey
OpenThreadToken
CryptGetProvParam
CryptReleaseContext
RegCloseKey
SetThreadToken
ole32
CoCreateInstance
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
msvcrt
_adjust_fdiv
_XcptFilter
memcpy
mbstowcs
_stricmp
towupper
_vsnwprintf
memset
_initterm
malloc
free
_except_handler3
__CxxFrameHandler
strchr
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ