CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
04332800a049055d6c3dc8d7fb073ce3909f0183aa31547865cdf8418a44bd88.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04332800a049055d6c3dc8d7fb073ce3909f0183aa31547865cdf8418a44bd88.dll
Resource
win10v2004-20220812-en
General
-
Target
04332800a049055d6c3dc8d7fb073ce3909f0183aa31547865cdf8418a44bd88
-
Size
4.2MB
-
MD5
4f69ddedb8cfd5e8ddc42873da1b00ce
-
SHA1
e4b174f0084738ceb5d91651775dcf98321af858
-
SHA256
04332800a049055d6c3dc8d7fb073ce3909f0183aa31547865cdf8418a44bd88
-
SHA512
5c2f09d43e179eb541c2e6aef428fe874724fa058d1b0971fad4d8a90852fb71e34ec0ca4a03b68eef4b1daf166042272e556a0047c92b32a2a4a45e667d425f
-
SSDEEP
98304:eB1ZERDi9VMms+sMXihKhHUYmZYDQkBMeflrUs7ow6hRPEGfTTQel4xJlZcMKCIp:eB1ZERDi9VMms+sMXihKhHUYmQQkBMeC
Malware Config
Signatures
Files
-
04332800a049055d6c3dc8d7fb073ce3909f0183aa31547865cdf8418a44bd88.dll windows x86
6105e888cd39c9cd12036d1470cd516b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
CloseHandle
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
ReadFile
SetConsoleCtrlHandler
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
IsBadCodePtr
IsBadWritePtr
SetFilePointer
GetOEMCP
GetACP
InterlockedExchange
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
IsBadReadPtr
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
ExitProcess
RaiseException
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
FatalAppExitA
EnterCriticalSection
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
VirtualProtect
VirtualAlloc
GetSystemInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
user32
SystemParametersInfoA
tier0
_AssertValidWritePtr
AssertValidStringPtr
_AssertValidReadPtr
?Lock@CThreadMutex@@QBEXXZ
DoNewAssertDialog
g_pMemAlloc
Warning
Msg
DevMsg
?DevWarning@@YAXPBDZZ
GetCPUInformation
g_ClockSpeed
MemAllocScratch
MemFreeScratch
?FindOrCreateCounter@CVProfile@@QAEPAHPBDW4CounterGroup_t@@@Z
_SpewInfo
_SpewMessage
ShouldUseNewAssertDialog
?Lock@CThreadMutex@@QAEXXZ
_ExitOnFatalAssert
CommandLine_Tier0
Error
?ExitScope@CVProfile@@QAEXXZ
g_VProfCurrentProfile
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
DevWarning
?DevMsg@@YAXPBDZZ
vstdlib
RandomInt
RandomSeed
RandomFloat
?AttachToStream@CGaussianRandomStream@@QAEXPAVIUniformRandomStream@@@Z
??0CGaussianRandomStream@@QAE@PAVIUniformRandomStream@@@Z
??0CUniformRandomStream@@QAE@XZ
?RandomFloat@CGaussianRandomStream@@QAEMMM@Z
?RandomFloat@CUniformRandomStream@@UAEMMM@Z
?SetSeed@CUniformRandomStream@@UAEXH@Z
KeyValuesSystem
GetCVarIF
Exports
Exports
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 616KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 591KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 352KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE