Static task
static1
Behavioral task
behavioral1
Sample
12f67bc3609350baf1db63934abe3db86523574a3dc3587e2b2727b5681302f6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
12f67bc3609350baf1db63934abe3db86523574a3dc3587e2b2727b5681302f6.dll
Resource
win10v2004-20220812-en
General
-
Target
12f67bc3609350baf1db63934abe3db86523574a3dc3587e2b2727b5681302f6
-
Size
62KB
-
MD5
7778309ac53566c636ccddebeb2116d0
-
SHA1
b685a2dc2c1c918251710fd681062c3d77e28e7d
-
SHA256
12f67bc3609350baf1db63934abe3db86523574a3dc3587e2b2727b5681302f6
-
SHA512
b89b6f9de7473ee5d8914805b337c682541ba9fcb163e381ae1ab17be1f417187ccbe46d8419d1c9579b1b47107ad01011b6fa69173f2467ec4fca727e8841a4
-
SSDEEP
1536:GnNBbq4+CSvXceTPa0T6iN7X8Nek/8FKevXlS:+Dm4+CKMtO6iNMt8FvX
Malware Config
Signatures
Files
-
12f67bc3609350baf1db63934abe3db86523574a3dc3587e2b2727b5681302f6.dll windows x86
a31c786e410aed77423641ab7d789b07
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileSize
CreateFileA
DeleteFileA
Sleep
CreateProcessA
MoveFileA
SetFileAttributesA
GetModuleFileNameA
WriteFile
DisableThreadLibraryCalls
CreateThread
GetCurrentDirectoryA
CreateFileW
HeapSize
ReadFile
GetProcessHeap
GetCurrentThreadId
DecodePointer
GetCommandLineA
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
RtlUnwind
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
ExitProcess
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
HeapReAlloc
LoadLibraryW
GetModuleFileNameW
WriteConsoleW
MultiByteToWideChar
SetFilePointer
LCMapStringW
GetStringTypeW
SetEndOfFile
shlwapi
PathFindFileNameA
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ