Static task
static1
Behavioral task
behavioral1
Sample
5c06b54ce0c17bf84ce29b9eb5f05e1388036baa7506a38adc2217e6fa0a07d3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c06b54ce0c17bf84ce29b9eb5f05e1388036baa7506a38adc2217e6fa0a07d3.dll
Resource
win10v2004-20220812-en
General
-
Target
5c06b54ce0c17bf84ce29b9eb5f05e1388036baa7506a38adc2217e6fa0a07d3
-
Size
86KB
-
MD5
27c42d1ede412ef7d91405eaeb6b0a84
-
SHA1
0058af1c26e9a53ac059f48a15a6452d606d64ad
-
SHA256
5c06b54ce0c17bf84ce29b9eb5f05e1388036baa7506a38adc2217e6fa0a07d3
-
SHA512
c9468fff3593fa6fa096f88d3d9a261259b601487d66ed3029ac693baac2ba1ec08025e7fd4b2cb5aaeb820b5f01053bb38249477dee68dd1bc47db61c12b444
-
SSDEEP
1536:E7fzY+VfUJ2v+CERq46Ji79LtXA+ZpgCiIQMOxpx8i:mLYQfUG+rR2G58Mqpx8
Malware Config
Signatures
Files
-
5c06b54ce0c17bf84ce29b9eb5f05e1388036baa7506a38adc2217e6fa0a07d3.dll windows x86
d6e59f27f85a5216667b021b9e7b09da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
lstrcpyA
CompareStringA
GetTickCount
lstrcatA
EnterCriticalSection
lstrlenA
lstrcmpiA
SetLastError
GetLastError
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
LocalFree
GetLocaleInfoW
HeapFree
HeapSize
GetProcessHeap
HeapValidate
lstrlenW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
lstrcmpA
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
FormatMessageW
CloseHandle
DeviceIoControl
QueueUserWorkItem
HeapAlloc
DeleteCriticalSection
CreateEventW
InitializeCriticalSection
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
WriteFile
ReadFile
BindIoCompletionCallback
CreateFileA
DeleteTimerQueueEx
ChangeTimerQueueTimer
InterlockedExchange
Sleep
InterlockedCompareExchange
GetModuleFileNameW
SetEvent
GetCommandLineA
GlobalFree
VirtualProtect
GetCurrentProcessId
GlobalAlloc
user32
CharNextW
LoadStringW
advapi32
RegEnumValueA
RegCloseKey
TraceMessage
RegOpenKeyExA
ole32
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
rpcrt4
RpcStringFreeW
UuidToStringW
I_RpcFree
I_RpcAllocate
msvcr71
_iob
__dllonexit
__CppXcptFilter
_initterm
_amsg_exit
_CxxThrowException
free
wcslen
towupper
memmove
malloc
_except_handler3
_ui64tow
_ultow
_onexit
_memicmp
memset
_adjust_fdiv
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ