CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
cbfe808408b2be2f7d0f5442cd2c166ca96bb41d488213c53b4cea47c1d33d45.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cbfe808408b2be2f7d0f5442cd2c166ca96bb41d488213c53b4cea47c1d33d45.dll
Resource
win10v2004-20220901-en
General
-
Target
cbfe808408b2be2f7d0f5442cd2c166ca96bb41d488213c53b4cea47c1d33d45
-
Size
180KB
-
MD5
8033d8f62035c3947ff7e5704b667850
-
SHA1
f5c777d82cf9b29c49cf2f82471dbe1d56c50b1b
-
SHA256
cbfe808408b2be2f7d0f5442cd2c166ca96bb41d488213c53b4cea47c1d33d45
-
SHA512
196d2fd6ff21c1a4c347798f0364751c576d0d4a756535991b0fc6e256327ff45272e62b2c1936ce711aedeb5ec2716d67575bd2bcccad7d2ce4cb4b25be8548
-
SSDEEP
3072:DxZoHPgYUMOAy+fBk7Fq4SeKDqk/zQWPEToiM1BJIjEJiDX:kvKMOAyQy7pKqkseYkBOoJiD
Malware Config
Signatures
Files
-
cbfe808408b2be2f7d0f5442cd2c166ca96bb41d488213c53b4cea47c1d33d45.dll windows x86
e555364721fccdeb82d6bcf2228c9fd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetModuleFileNameA
DeleteFileA
GetPrivateProfileIntA
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
MultiByteToWideChar
OutputDebugStringA
GetModuleHandleA
InterlockedIncrement
CreateFileA
WriteFile
SetFilePointer
CloseHandle
FileTimeToSystemTime
ReadFile
SetEndOfFile
GetProcessTimes
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
GetProcessHeap
HeapFree
WideCharToMultiByte
lstrlenA
GetLastError
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
user32
GetParent
GetClientRect
RegisterClassExA
DefWindowProcA
CallWindowProcA
CreateWindowExA
GetWindowLongA
GetTopWindow
SetWindowLongA
DestroyWindow
IsWindow
SetForegroundWindow
ShowWindow
MoveWindow
ole32
OleCreate
oleaut32
VariantCopy
VariantClear
VariantChangeType
SysAllocStringLen
VariantInit
SysFreeString
SysAllocString
msvcp80
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
msvcr80
_decode_pointer
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
??3@YAXPAX@Z
__RTDynamicCast
??0exception@std@@QAE@ABV01@@Z
_mbscmp
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
??_V@YAXPAX@Z
_itoa
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
_purecall
memmove_s
_mbsnbcpy
??0exception@std@@QAE@ABQBD@Z
_mbsrchr
_mbsnbcat
free
_time64
strftime
_localtime64
_vsnprintf_s
malloc
__CxxFrameHandler3
_CxxThrowException
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_amsg_exit
_malloc_crt
_encoded_null
_initterm
_initterm_e
__clean_type_info_names_internal
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE