Static task
static1
Behavioral task
behavioral1
Sample
1fad5afe5f7f3b165bf8e5b8825bfe50d2957a466d896dd51d1ffac371a12d6c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1fad5afe5f7f3b165bf8e5b8825bfe50d2957a466d896dd51d1ffac371a12d6c.dll
Resource
win10v2004-20220812-en
General
-
Target
1fad5afe5f7f3b165bf8e5b8825bfe50d2957a466d896dd51d1ffac371a12d6c
-
Size
105KB
-
MD5
7b9d67d838c70c97d2151974ca50690d
-
SHA1
28ed7d9214689802ba71c5ba4154ea02a13ee399
-
SHA256
1fad5afe5f7f3b165bf8e5b8825bfe50d2957a466d896dd51d1ffac371a12d6c
-
SHA512
78f68727887469c6c27c787dec619d3b10171761b247260be0780ff0e7f29672dad7b0096e1fed9171666c8008bbeda75c7c177e8e4e8a42c54d2f557ffb1d3f
-
SSDEEP
1536:OCsrpx3n49uVNSwbIbFp1Yi29EGRlh0UuY/BsvTD/2ZagvEq8E/My88Iou8IhZd:k3n4EVNSwba2NuYpYD/Cag8e88Ilh
Malware Config
Signatures
Files
-
1fad5afe5f7f3b165bf8e5b8825bfe50d2957a466d896dd51d1ffac371a12d6c.dll windows x86
f0766ef8c7e372367b33e4b5cffce77f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetACP
GetEnvironmentStrings
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
DisableThreadLibraryCalls
SetLastError
LocalAlloc
LocalFree
InterlockedExchange
Sleep
InterlockedCompareExchange
TlsFree
SetEvent
GetCurrentThread
GetSystemTime
SystemTimeToFileTime
HeapAlloc
HeapFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
CloseHandle
CancelWaitableTimer
RegisterWaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
CompareFileTime
WaitForSingleObject
FreeLibrary
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsSetValue
GetCurrentThreadId
ExitProcess
GetVersion
GetOEMCP
GetTickCount
GetCommandLineA
WaitForMultipleObjects
VirtualProtect
user32
LoadStringW
advapi32
LsaNtStatusToWinError
CryptGetUserKey
CryptGetKeyParam
CryptDestroyKey
OpenThreadToken
CryptGetProvParam
CryptReleaseContext
RegCloseKey
SetThreadToken
ole32
CoCreateInstance
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
msvcrt
_adjust_fdiv
_XcptFilter
memcpy
mbstowcs
_stricmp
towupper
_vsnwprintf
memset
_initterm
malloc
free
_except_handler3
__CxxFrameHandler
strchr
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ