Static task
static1
Behavioral task
behavioral1
Sample
ba86040b583c6111cf1579b5e5ec6afeb96f28c3e5b4c1463fd254ee7cc97de1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba86040b583c6111cf1579b5e5ec6afeb96f28c3e5b4c1463fd254ee7cc97de1.dll
Resource
win10v2004-20220812-en
General
-
Target
ba86040b583c6111cf1579b5e5ec6afeb96f28c3e5b4c1463fd254ee7cc97de1
-
Size
122KB
-
MD5
7b612bc969107b8f76fa84d69042e91e
-
SHA1
8d56fad98efaf15a3cc4e3830b48b7fcd3cfc247
-
SHA256
ba86040b583c6111cf1579b5e5ec6afeb96f28c3e5b4c1463fd254ee7cc97de1
-
SHA512
268b0b8171a6be39c8eb5349a215ba2546b9220f394f818ab30cced230afc7d1d22adc7b0960594a6f06a14496309cd38f3288035ce19d002bb445751544a82b
-
SSDEEP
3072:a+AmLhEaRJzJj9ExLmRzfijK/YncCWe7:nAmLhE0dj9ExW0hcCWe
Malware Config
Signatures
Files
-
ba86040b583c6111cf1579b5e5ec6afeb96f28c3e5b4c1463fd254ee7cc97de1.dll windows x86
7ca2267e09ba5d34e39cec60c6de3a4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
VirtualUnlock
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentDirectoryW
SearchPathW
SetCurrentDirectoryW
GetFullPathNameA
GetFullPathNameW
CreateFileA
DisableThreadLibraryCalls
GetTickCount
FindResourceW
LoadResource
SizeofResource
lstrlenA
lstrcpynW
Sleep
GetCommandLineW
GetProcessHeap
OutputDebugStringA
FreeLibrary
GetProcAddress
GetSystemDirectoryW
LoadLibraryW
GetFileAttributesW
LoadLibraryExW
GetModuleFileNameW
GetACP
CloseHandle
InterlockedExchange
CreateFileW
MultiByteToWideChar
GetLocaleInfoW
LocalFree
MulDiv
lstrlenW
GetCommandLineA
ExitProcess
FormatMessageW
LocalAlloc
VirtualProtect
WideCharToMultiByte
user32
GetMessageW
LoadAcceleratorsW
MessageBoxW
GetDesktopWindow
CreateWindowExW
CharNextW
PostQuitMessage
DestroyWindow
TranslateMessage
EndPaint
GetClientRect
BeginPaint
SendMessageW
DefWindowProcW
EnableWindow
InvalidateRect
MessageBeep
GetSysColorBrush
DispatchMessageW
LoadIconW
SetRect
ScrollWindowEx
SetScrollInfo
RegisterClassW
LoadCursorW
PostMessageW
SetCursor
SetWindowPos
DrawTextW
GetSystemMetrics
LoadStringW
PostThreadMessageW
TranslateAcceleratorW
advapi32
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
InitializeAcl
AddAce
GetSidSubAuthority
InitializeSid
GetSidLengthRequired
IsValidSecurityDescriptor
RegCloseKey
RegSetValueExW
SetSecurityDescriptorDacl
gdi32
OffsetRgn
StartDocW
StartPage
EndPage
EndDoc
SetTextAlign
GetTextExtentPoint32W
GetTextMetricsW
MoveToEx
LineTo
AddFontResourceW
GetFontResourceInfoW
GetFontData
GetDeviceCaps
DeleteDC
DeleteObject
GetTextCharsetInfo
SelectObject
CreateFontIndirectW
TranslateCharsetInfo
CreateCompatibleDC
GetStockObject
CombineRgn
ExtCreateRegion
CreateRectRgn
RemoveFontResourceW
ole32
CoTaskMemAlloc
CoRegisterPSClsid
CoRegisterClassObject
CoInitializeSecurity
CoUninitialize
CoTaskMemFree
msvcrt
realloc
_isatty
__CxxFrameHandler
_errno
wcsrchr
_wcsnicmp
wcsncmp
_CxxThrowException
mbtowc
__mb_cur_max
_iob
ferror
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_cexit
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
memset
wcstoul
_vsnwprintf
_except_handler3
free
malloc
wcslen
rand
_wcsicmp
_adjust_fdiv
srand
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ