Static task
static1
Behavioral task
behavioral1
Sample
86a35ec6041e2b9e6cc21a98aa17f3f635058400560b5319bb2ec1cca15785ac.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86a35ec6041e2b9e6cc21a98aa17f3f635058400560b5319bb2ec1cca15785ac.dll
Resource
win10v2004-20220901-en
General
-
Target
86a35ec6041e2b9e6cc21a98aa17f3f635058400560b5319bb2ec1cca15785ac
-
Size
189KB
-
MD5
6ab247b3d8580b4f2b13b4dcf77ae030
-
SHA1
83cda27928be164bcedea46f28c8a581e8521aab
-
SHA256
86a35ec6041e2b9e6cc21a98aa17f3f635058400560b5319bb2ec1cca15785ac
-
SHA512
3f1f49fc5f612781cb22c21da250631b2d359f5a8797a4ab0b562a1a7ee6b11ba633c419091fa77d26e45ad11c169c4527f89382cebb423296866d782111d4c4
-
SSDEEP
3072:C9TjiEhsOvk6iDM4jn1pDAGuFThYhDIH1lVF:C0E/vk6iDpTGZwD
Malware Config
Signatures
Files
-
86a35ec6041e2b9e6cc21a98aa17f3f635058400560b5319bb2ec1cca15785ac.dll windows x86
bf36669d9ee980a75c1a81d908e4e1ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapValidate
HeapAlloc
CreateSemaphoreW
ExitProcess
SetStdHandle
TlsSetValue
FreeEnvironmentStringsW
FlushFileBuffers
GetModuleHandleW
InterlockedDecrement
DeleteFileW
GetEnvironmentStringsW
WriteConsoleW
SetLastError
lstrlenW
HeapDestroy
TerminateProcess
WaitForSingleObjectEx
GetFileType
GetCommandLineA
GetEnvironmentVariableA
RtlUnwind
GetCurrentProcess
ReleaseSemaphore
LeaveCriticalSection
LoadLibraryW
GetDateFormatW
DeleteCriticalSection
TlsAlloc
IsValidCodePage
InitializeCriticalSectionAndSpinCount
FindFirstFileW
LoadLibraryExW
RemoveDirectoryW
GetLocaleInfoW
UnhandledExceptionFilter
GetFileAttributesW
GetUserDefaultUILanguage
HeapSetInformation
GetOEMCP
WideCharToMultiByte
HeapCreate
VirtualAlloc
EnterCriticalSection
MultiByteToWideChar
GetConsoleCP
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
GetACP
FileTimeToSystemTime
SetEvent
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
TlsGetValue
HeapReAlloc
Sleep
CloseHandle
HeapSize
SleepEx
GetModuleFileNameW
LCMapStringW
IsDebuggerPresent
VirtualQuery
GetTickCount
GetModuleFileNameA
CreateMutexW
GetVersion
RaiseException
GetTimeFormatW
FileTimeToLocalFileTime
ResetEvent
VirtualFree
SetFilePointer
QueryPerformanceCounter
InterlockedIncrement
ReleaseMutex
HeapFree
GetLastError
TlsFree
CreateEventW
GetStdHandle
FreeLibrary
FormatMessageW
FindClose
FindNextFileW
GetSystemDefaultLangID
LoadLibraryExA
GetCurrentThreadId
SetHandleCount
GetStringTypeW
LocalFree
InterlockedCompareExchange
GetConsoleOutputCP
GetProcAddress
InitializeCriticalSection
user32
MessageBoxW
EnableWindow
GetDlgItem
GetWindowRect
ShowWindow
EndDialog
SetForegroundWindow
SetDlgItemTextW
GetSystemMetrics
DialogBoxParamW
SetFocus
SendMessageW
MoveWindow
LoadStringW
advapi32
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
TraceEvent
RegQueryValueExW
shell32
ShellExecuteExW
oleaut32
SetErrorInfo
shlwapi
PathRemoveBackslashW
PathFindFileNameW
StrCmpW
StrStrIW
StrStrW
winmm
auxGetVolume
wininet
FindNextUrlCacheEntryW
FindCloseUrlCache
DeleteUrlCacheEntryW
GetUrlCacheEntryInfoW
FindFirstUrlCacheEntryW
Sections
.text Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ