Static task
static1
Behavioral task
behavioral1
Sample
fce53d83cf7baaa0e309d3e90f5840ceb3d8ead8fd8da183ce6a9a0c4b1a0e92.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fce53d83cf7baaa0e309d3e90f5840ceb3d8ead8fd8da183ce6a9a0c4b1a0e92.dll
Resource
win10v2004-20220812-en
General
-
Target
fce53d83cf7baaa0e309d3e90f5840ceb3d8ead8fd8da183ce6a9a0c4b1a0e92
-
Size
106KB
-
MD5
84ed54b2ef86a111b5c0451f0136d831
-
SHA1
5dc7b0dbd71c406296de1e19697c8a8ccf8a7f70
-
SHA256
fce53d83cf7baaa0e309d3e90f5840ceb3d8ead8fd8da183ce6a9a0c4b1a0e92
-
SHA512
a2694d12934d38a8b8b56eb6cff9d23aaa355290f4b7fcd60e061653e7769c8828bfb13863bfca08f0faf637ce4bfcd37773e86b1dfa94bdfe3441ba3975f671
-
SSDEEP
3072:/XO/p0rEmW69wLSF7JUm62nQsyU7Ctyt5SuMj5QCw:/HrEm5wuEm6uOtm8Tw
Malware Config
Signatures
Files
-
fce53d83cf7baaa0e309d3e90f5840ceb3d8ead8fd8da183ce6a9a0c4b1a0e92.dll windows x86
7d3eaee5bf9a742d9d40b148a9c7f861
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
CreateSemaphoreW
ReleaseSemaphore
OpenSemaphoreW
ReleaseMutex
CreateMutexW
GetCurrentProcessId
LoadLibraryW
FreeLibrary
GetTimeFormatW
GetLocalTime
GetDateFormatW
GetTempPathW
SetFilePointer
CreateDirectoryW
SetLastError
lstrlenW
SizeofResource
LockResource
LoadResource
FindResourceW
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
FindClose
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetModuleHandleW
GetVersion
lstrlenA
GetThreadLocale
lstrcmpW
GlobalFlags
CompareStringW
GetVersionExA
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetModuleHandleA
InterlockedExchange
CompareStringA
GetLocaleInfoW
FlushFileBuffers
SetEndOfFile
GetFullPathNameW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA
SetEnvironmentVariableA
InterlockedIncrement
MultiByteToWideChar
GetUserDefaultLCID
GetUserDefaultUILanguage
GetSystemDefaultLangID
CreateProcessW
SetCurrentDirectoryW
SetThreadContext
GetThreadContext
ExitProcess
VirtualProtectEx
FlushInstructionCache
ResumeThread
WriteProcessMemory
DuplicateHandle
GetCurrentProcess
ConnectNamedPipe
CreateNamedPipeW
WideCharToMultiByte
ReadFile
RemoveDirectoryW
WriteFile
GetLastError
WaitNamedPipeW
DisconnectNamedPipe
GetCommandLineW
CreateFileW
SetFileAttributesW
DeleteFileW
Sleep
CreateEventW
LocalAlloc
LocalFree
SetEvent
GetCurrentThreadId
GetProcAddress
CloseHandle
WaitForSingleObject
CreateThread
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetModuleFileNameW
IsDBCSLeadByteEx
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
shlwapi
PathSearchAndQualifyW
PathRemoveBackslashW
PathFileExistsW
StrRChrW
PathRemoveFileSpecW
ole32
CoInitialize
CoUninitialize
OleInitialize
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
oleaut32
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
VariantCopy
SysStringLen
VariantInit
VariantChangeType
Sections
CODE Size: 64KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abss Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.atls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.shared Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ