Static task
static1
Behavioral task
behavioral1
Sample
f1d132abfaaf83f10722229cb63d2b684ebf4f66ee5538a5f8dae77fb7861a51.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1d132abfaaf83f10722229cb63d2b684ebf4f66ee5538a5f8dae77fb7861a51.dll
Resource
win10v2004-20220901-en
General
-
Target
f1d132abfaaf83f10722229cb63d2b684ebf4f66ee5538a5f8dae77fb7861a51
-
Size
395KB
-
MD5
e9e7bfa69da3a766b5762b27ac58f85d
-
SHA1
0c5586ff50a0ba3d488e410875825964d1e1362c
-
SHA256
f1d132abfaaf83f10722229cb63d2b684ebf4f66ee5538a5f8dae77fb7861a51
-
SHA512
eb1c1fe878bcd7e172b272519a3f55f6a9d94ae9f68fadc49be3b53caf368fb8deaa4733e5409ac6ebb5b52183504b4404e353a4a645a1daf2eec851e7a8c068
-
SSDEEP
6144:+6ZCaOtQWxu+K5/Yrdi1a7Wl8rFd/o79oGjchEowMIGaDP:PsBx1MyPcG/klcq9GW
Malware Config
Signatures
Files
-
f1d132abfaaf83f10722229cb63d2b684ebf4f66ee5538a5f8dae77fb7861a51.dll windows x86
568ecd4c03b251061c4eab5486f73268
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
Sleep
FreeConsole
GetConsoleWindow
GetEnvironmentVariableA
GetProcAddress
DisableThreadLibraryCalls
LoadLibraryA
GetSystemInfo
AllocConsole
VirtualProtect
CreateThread
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
user32
mouse_event
MessageBoxA
SetRect
GetAsyncKeyState
ShowWindow
d3dx9_43
D3DXCreateSprite
D3DXCreateFontA
D3DXMatrixTranspose
D3DXCreateLine
D3DXCreateTextureFromFileInMemoryEx
msvcp90
?id@?$ctype@D@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?toupper@?$ctype@D@std@@QBEDD@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??1locale@std@@QAE@XZ
??0locale@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
wsock32
WSAGetLastError
htons
gethostbyname
ioctlsocket
socket
recv
WSACleanup
send
WSAStartup
inet_addr
connect
gethostname
closesocket
msvcr90
_decode_pointer
_CxxThrowException
_CIsqrt
memset
__CxxFrameHandler3
_itoa
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
vsprintf
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
_cprintf
vsprintf_s
strtok
??3@YAXPAX@Z
exit
??2@YAPAXI@Z
sprintf
abort
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
memcpy
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 252KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE