Static task
static1
Behavioral task
behavioral1
Sample
3fd8873134f9155cada6b7331b60dd1f071ea91ba174071a5d633bbd63e47748.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fd8873134f9155cada6b7331b60dd1f071ea91ba174071a5d633bbd63e47748.dll
Resource
win10v2004-20220812-en
General
-
Target
3fd8873134f9155cada6b7331b60dd1f071ea91ba174071a5d633bbd63e47748
-
Size
421KB
-
MD5
50bc385aa4e0f5c870c0461188a7b872
-
SHA1
2893e618b99147655b14032c3bfc77b5be7e1345
-
SHA256
3fd8873134f9155cada6b7331b60dd1f071ea91ba174071a5d633bbd63e47748
-
SHA512
a02583ab0473b774457c268a15ecddd26ac179f9ba35f1971c2949c4b70e4f6bcdc958e534af4ef548e04a63ace21c3f21ac029fec5256a5b91acd9d6ad012fb
-
SSDEEP
6144:eepNNZ5+lNm4fXnVbCMye49izSfLOK4ucjo8hmyqbYP9AiUYy0hx5JT:ee/35+zfFCHe4UnHhmyqbYxC0bv
Malware Config
Signatures
Files
-
3fd8873134f9155cada6b7331b60dd1f071ea91ba174071a5d633bbd63e47748.dll windows x86
2a502bd0e6791bd8586c7c5851f28c19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLastError
CreateIoCompletionPort
CloseHandle
InitializeCriticalSection
GetQueuedCompletionStatus
InterlockedExchangeAdd
InterlockedExchange
InterlockedIncrement
PostQueuedCompletionStatus
InterlockedCompareExchange
InterlockedDecrement
SetLastError
GetCurrentThreadId
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
GetCurrentProcess
GetCurrentProcessId
CreateFileW
GetModuleFileNameW
GetProcAddress
LoadLibraryW
GetModuleHandleW
FreeLibrary
GetProcessHeap
HeapFree
HeapAlloc
CreateEventA
WaitForSingleObject
QueueUserAPC
TerminateThread
Sleep
CreateEventW
SleepEx
SetEvent
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
LocalFree
FormatMessageA
ReleaseMutex
CreateMutexA
ResetEvent
ResumeThread
GetTickCount
SystemTimeToFileTime
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerA
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
msvcp90
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAEHH@Z
?eof@?$char_traits@D@std@@SAHXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?flags@ios_base@std@@QBEHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?width@ios_base@std@@QBEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?max@?$numeric_limits@K@std@@SAKXZ
?min@?$numeric_limits@K@std@@SAKXZ
??0id@locale@std@@QAE@I@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?max@?$numeric_limits@_J@std@@SA_JXZ
?min@?$numeric_limits@_J@std@@SA_JXZ
?max@?$numeric_limits@I@std@@SAIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?length@?$char_traits@D@std@@SAIPBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
ws2_32
select
__WSAFDIsSet
getsockopt
WSARecvFrom
WSASendTo
ntohs
inet_addr
getsockname
listen
accept
WSARecv
connect
ioctlsocket
bind
WSASocketW
ntohl
htons
htonl
WSASend
closesocket
WSAGetLastError
setsockopt
WSASetLastError
WSAStartup
WSACleanup
loglib
IsNeedLog
WriteLog
pluginkernel
ord2
msvcr90
_lock
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
??3@YAXPAX@Z
_purecall
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
??0exception@std@@QAE@XZ
??8type_info@@QBE_NABV0@@Z
_invalid_parameter_noinfo
_vswprintf
_localtime64
_time64
_vsnprintf
??0exception@std@@QAE@ABQBDH@Z
memset
memcpy
_beginthreadex
_gmtime64
__CxxFrameHandler3
strerror
_CxxThrowException
_unlock
__dllonexit
_encode_pointer
_initterm_e
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
__clean_type_info_names_internal
Sections
.text Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE