Static task
static1
Behavioral task
behavioral1
Sample
d00e021f9128b5192f0ecb11f3252c9d276b7da7250e5c69bdc1eb78225ed0be.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d00e021f9128b5192f0ecb11f3252c9d276b7da7250e5c69bdc1eb78225ed0be.dll
Resource
win10v2004-20220812-en
General
-
Target
d00e021f9128b5192f0ecb11f3252c9d276b7da7250e5c69bdc1eb78225ed0be
-
Size
828KB
-
MD5
a065ae093296c2223815a16005cc6b40
-
SHA1
789d921686c9b77731b3e1bc0a39266b7d82fbeb
-
SHA256
d00e021f9128b5192f0ecb11f3252c9d276b7da7250e5c69bdc1eb78225ed0be
-
SHA512
65cd4a8f2eda22b5e007477ce783c88f344c9699e1d2ecf152e4b86d31c89443192e3f0c6a2673e89be3641fffe3a2c160ad0e88a250e02a732cc94f966b21c1
-
SSDEEP
24576:/sFIxL/YmuLvwnSG0QfIjygPK+PxIHj0GLZvYV:/jLwmuISG0QfwBzJIHYGvY
Malware Config
Signatures
Files
-
d00e021f9128b5192f0ecb11f3252c9d276b7da7250e5c69bdc1eb78225ed0be.dll windows x86
aab9ede00effd4bca67cc32b6eea2f1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
LCMapStringW
UnhandledExceptionFilter
GetConsoleOutputCP
GetLocaleInfoA
HeapSize
GetFileType
Sleep
TerminateProcess
GetCurrentProcessId
GetCommandLineA
RtlUnwind
WideCharToMultiByte
GetCurrentProcess
LCMapStringA
ExitProcess
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
TlsFree
TlsSetValue
GetTickCount
HeapCreate
GetProcAddress
GetSystemTimeAsFileTime
InterlockedIncrement
GetModuleHandleA
HeapFree
MultiByteToWideChar
TlsGetValue
GetEnvironmentStringsW
GetStringTypeA
GetStartupInfoA
VirtualFree
QueryPerformanceCounter
GetEnvironmentStrings
CreateFileA
HeapReAlloc
FlushFileBuffers
GetCPInfo
TlsAlloc
GetConsoleMode
GetLastError
IsValidCodePage
GetStringTypeW
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetCurrentThreadId
RaiseException
InterlockedDecrement
WriteConsoleA
CloseHandle
GetStdHandle
GetModuleHandleW
VirtualAlloc
LoadLibraryA
WriteConsoleW
EnterCriticalSection
GetACP
lstrlenA
GetProcessHeap
VirtualProtectEx
GetTempFileNameA
GetTempPathA
lstrcpyA
SetHandleCount
WriteFile
FreeEnvironmentStringsW
LeaveCriticalSection
SetStdHandle
HeapAlloc
GetOEMCP
DeleteCriticalSection
user32
MessageBoxA
wsprintfA
LoadIconA
SetMenu
GetDC
GetMessageA
CreateWindowExA
UpdateWindow
RegisterClassA
SetWindowPos
EnumDisplayDevicesA
GetSystemMetrics
InvalidateRect
DefWindowProcA
ReleaseDC
LoadAcceleratorsA
GetFocus
GetWindowRect
ShowWindow
MoveWindow
LoadCursorA
EnumDisplaySettingsA
DispatchMessageA
SetTimer
SetWindowLongA
TranslateMessage
PostMessageA
TranslateAcceleratorA
ValidateRect
PostQuitMessage
gdi32
GetDeviceCaps
SwapBuffers
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
shlwapi
PathAppendA
avifil32
AVIStreamInfoW
Sections
.code Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pyrple2 Size: 759KB - Virtual size: 758KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cyan2 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ