Static task
static1
Behavioral task
behavioral1
Sample
2913b959493af984e13d75e60ab7efaae692c7cadb8449aafdde4523ffc26e10.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2913b959493af984e13d75e60ab7efaae692c7cadb8449aafdde4523ffc26e10.dll
Resource
win10v2004-20220812-en
General
-
Target
2913b959493af984e13d75e60ab7efaae692c7cadb8449aafdde4523ffc26e10
-
Size
160KB
-
MD5
04d339691c81e18785746e098bd7cf7a
-
SHA1
78a99e0954f5092a4bcbddbe15737d847182bb76
-
SHA256
2913b959493af984e13d75e60ab7efaae692c7cadb8449aafdde4523ffc26e10
-
SHA512
f4bfe52cb681afcd9948d1d8da84aa4b6690f395614461f6e7239dce38fe45329d1c2a60f8956dfe27d685907a144560f70455097308544d94cf15836bdbf03e
-
SSDEEP
3072:u8nrKBx+CDnZ8PKdeZohMqqDLy/E3leb3StwB53:Z6Dmm6qqDLuE3YC
Malware Config
Signatures
Files
-
2913b959493af984e13d75e60ab7efaae692c7cadb8449aafdde4523ffc26e10.dll windows x86
d48caa8fcff65331dfa87c12258c8145
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
CloseHandle
SetEvent
LCMapStringW
WaitForSingleObject
GetProcessHeap
lstrlenW
LocalFree
GetVersionExW
lstrcmpW
GetProcAddress
FreeLibrary
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
RegisterWaitForSingleObject
GetCommandLineW
CreateEventW
LoadLibraryA
GetStringTypeA
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
IsBadCodePtr
VirtualProtect
GetWindowsDirectoryW
FormatMessageW
GetCommandLineA
GetCurrentThreadId
IsBadWritePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
IsWindow
ChangeDisplaySettingsW
SetDlgItemTextW
SendMessageW
GetDlgItem
LoadIconW
DestroyIcon
MessageBoxW
DialogBoxParamW
GetWindowLongW
EndDialog
advapi32
RegOpenKeyW
IsValidSecurityDescriptor
GetSecurityDescriptorLength
RegCloseKey
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ