Static task
static1
Behavioral task
behavioral1
Sample
25b03b1a6b67ad5b5b7347b22fbce6188ef1c33e504e34de6c0d20b181f2d3fd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25b03b1a6b67ad5b5b7347b22fbce6188ef1c33e504e34de6c0d20b181f2d3fd.dll
Resource
win10v2004-20220812-en
General
-
Target
25b03b1a6b67ad5b5b7347b22fbce6188ef1c33e504e34de6c0d20b181f2d3fd
-
Size
160KB
-
MD5
4fd62b9b07269d97d96c7cdfa39a1028
-
SHA1
32777479d7e42258c19f90b4a8a3941a75ab1704
-
SHA256
25b03b1a6b67ad5b5b7347b22fbce6188ef1c33e504e34de6c0d20b181f2d3fd
-
SHA512
f8890df9cebd2ebc3611439879731ec0c5a563a05dbe0f8e2eff17f8f2f512b5f1c53ca57e1d824e79858e9bce250205df9b66c6f0fc8685e0b6c23691aadb55
-
SSDEEP
3072:fhLnN38ae0H8A60u7di/qQ5mQnglMMqqDLy/DhmGTWp41AJzs/H:fRnCHcu7055KqqDLulmGTWcAO
Malware Config
Signatures
Files
-
25b03b1a6b67ad5b5b7347b22fbce6188ef1c33e504e34de6c0d20b181f2d3fd.dll windows x86
e4ce44af32498c053a880d48c278d340
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindFirstFileA
UnmapViewOfFile
lstrcmpA
MapViewOfFile
CloseHandle
CreateFileMappingA
GetFileSize
CreateFileA
lstrcatA
InterlockedDecrement
GetFileAttributesA
GetTimeZoneInformation
FindNextFileA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsFree
TerminateProcess
ExitProcess
LocalFree
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WaitForSingleObjectEx
CancelWaitableTimer
GetCommandLineW
GetDriveTypeW
GetConsoleOutputCP
CreateEventW
CreateWaitableTimerW
GetConsoleMode
SetConsoleMode
ReadConsoleW
WaitForSingleObject
FormatMessageW
GetStdHandle
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
SetConsoleCursorPosition
SetEvent
lstrcpynA
Sleep
GetModuleHandleW
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenW
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
GetVersionExW
VirtualAlloc
VirtualQuery
MultiByteToWideChar
lstrcpyW
lstrcpynW
LoadLibraryW
lstrcatW
GetFileAttributesW
GetLocaleInfoA
GetStringTypeW
GetSystemInfo
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
GetProfileStringA
GetPrivateProfileStringA
GetProcAddress
FreeLibrary
ExpandEnvironmentStringsA
lstrlenA
lstrcpyA
LoadLibraryA
lstrcmpiA
GetVersionExA
LocalAlloc
TlsAlloc
VirtualProtect
InterlockedExchange
GetCommandLineA
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleHandleA
RtlUnwind
user32
SendMessageA
GetWindowLongA
GetDlgItem
DestroyWindow
SetTimer
ShowWindow
SetWindowTextA
DispatchMessageA
TranslateMessage
CharPrevW
CharNextW
SetWindowLongA
EndDialog
EnableWindow
wsprintfA
LoadStringA
CreateDialogParamA
CharPrevA
GetDlgItemTextA
SetDlgItemTextA
GetParent
MessageBoxA
KillTimer
PeekMessageA
advapi32
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyExW
ole32
CoCreateInstance
CoGetMalloc
CoTaskMemAlloc
CLSIDFromString
CoTaskMemFree
CoInitializeEx
StringFromGUID2
CoTaskMemRealloc
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ