Static task
static1
Behavioral task
behavioral1
Sample
ac37e2c22217b9d9e5bd6f43eece3ccd5eb5a629661ede90076ccc0d2fb27805.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac37e2c22217b9d9e5bd6f43eece3ccd5eb5a629661ede90076ccc0d2fb27805.dll
Resource
win10v2004-20220812-en
General
-
Target
ac37e2c22217b9d9e5bd6f43eece3ccd5eb5a629661ede90076ccc0d2fb27805
-
Size
2.2MB
-
MD5
dcae625a3b7409ff31bc55bdab1c2e4e
-
SHA1
8402c759e54810dffb0c83f240e0d15980f65d50
-
SHA256
ac37e2c22217b9d9e5bd6f43eece3ccd5eb5a629661ede90076ccc0d2fb27805
-
SHA512
dbf097a7488773286ae0fbfaf53e5ad87c50b8a8e8fc15e087ba41adc4621644d086e1da6c1e169fdd4f05db6d4729a2b70fbb2db548aba61edd7a82010e4d4a
-
SSDEEP
49152:Pyy1hnvJnms34REagwU9OsRzkbTAUOJ59X19sjq:Plvd14RZU9tRz975vqj
Malware Config
Signatures
Files
-
ac37e2c22217b9d9e5bd6f43eece3ccd5eb5a629661ede90076ccc0d2fb27805.dll windows x86
e6c124240199787fc555a8e0b115525d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
SetFilePointerEx
HeapSize
LoadLibraryW
OutputDebugStringW
GetStringTypeW
HeapReAlloc
RtlUnwind
LoadLibraryExW
WriteConsoleW
CloseHandle
GetProcessHeap
GetProcAddress
LoadLibraryA
ExitProcess
VirtualProtect
HeapFree
HeapAlloc
FileTimeToLocalFileTime
GetModuleFileNameW
WriteFile
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
Sleep
EnterCriticalSection
LeaveCriticalSection
CreateFileW
advapi32
RegDeleteKeyW
RegCloseKey
user32
CreateDialogParamW
DrawFrameControl
DdeGetData
CreateWindowExW
DrawEdge
DdeCreateDataHandle
CallWindowProcW
DispatchMessageW
DdeUninitialize
DdeQueryStringW
AdjustWindowRectEx
DdeGetLastError
CreatePopupMenu
DdeFreeDataHandle
CloseClipboard
DrawIconEx
DdeCreateStringHandleW
ClientToScreen
DdeInitializeW
CheckMenuRadioItem
DeferWindowPos
DdeDisconnect
DestroyCursor
DestroyIcon
gdi32
Arc
CreateDIBitmap
CreatePen
CreatePalette
CombineRgn
CopyEnhMetaFileW
CreateICW
CreateHatchBrush
BitBlt
CreateCompatibleBitmap
CreateEnhMetaFileW
ole32
CoCreateInstance
CoLockObjectExternal
CoFreeUnusedLibraries
shell32
DragAcceptFiles
DragQueryFileW
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ