crashHandler
Static task
static1
Behavioral task
behavioral1
Sample
a2df22fd2802217b03930d4b8168dab3b552e1e8ce5e757b9c4a27c26717d9ca.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a2df22fd2802217b03930d4b8168dab3b552e1e8ce5e757b9c4a27c26717d9ca.dll
Resource
win10v2004-20220901-en
General
-
Target
a2df22fd2802217b03930d4b8168dab3b552e1e8ce5e757b9c4a27c26717d9ca
-
Size
333KB
-
MD5
57b99b623ced50b2e9a2667fc1edbd96
-
SHA1
65e65c581b4221ac950e24561ddc71a5df6e5e39
-
SHA256
a2df22fd2802217b03930d4b8168dab3b552e1e8ce5e757b9c4a27c26717d9ca
-
SHA512
faa97a84da895cdcac0453e9e0f61412dcb7469c02f3f49abead3d40858ccfcb9d44d66a923024c59db2921082387e300392d7f689e63f3c71b707448b825931
-
SSDEEP
6144:K4zo5gkMef/KKgyHEHll1sbLKT1zkWwOCqM5Xiysw/m4:WLtEHNzx+Vm4
Malware Config
Signatures
Files
-
a2df22fd2802217b03930d4b8168dab3b552e1e8ce5e757b9c4a27c26717d9ca.dll windows x64
88ed46fd1993015ea3eabd22970e0831
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleacc
AccessibleObjectFromWindow
AccessibleObjectFromPoint
kernel32
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
lstrlenA
GetProcAddress
LoadLibraryA
FreeLibrary
LocalFree
OpenProcess
CloseHandle
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetModuleHandleA
TerminateProcess
GetTickCount
GetCurrentProcessId
LoadLibraryExA
GetCommandLineA
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
SetLastError
RaiseException
DeleteCriticalSection
LoadLibraryExW
VirtualQuery
VirtualFree
VirtualAlloc
GetSystemInfo
GetThreadContext
LeaveCriticalSection
SetThreadContext
HeapAlloc
HeapFree
Sleep
HeapDestroy
HeapCreate
OpenThread
VirtualProtect
SuspendThread
ResumeThread
GetNamedPipeHandleStateA
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
RtlUnwindEx
GetStartupInfoW
GetFileType
SetHandleCount
GetStringTypeW
GetLocaleInfoW
GetModuleFileNameW
GetStdHandle
WriteFile
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetVersion
HeapSetInformation
ExitProcess
GetModuleHandleW
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
CompareStringW
GetCPInfo
HeapReAlloc
FlushFileBuffers
LocalAlloc
HeapSize
GetProcessHeap
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeCriticalSection
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
FlsSetValue
RtlPcToFileHeader
RtlLookupFunctionEntry
LCMapStringW
user32
IsWindowVisible
GetWindowLongA
CallNextHookEx
RegisterWindowMessageA
CallWindowProcA
CreateWindowExA
GetWindowLongPtrA
SetWindowLongPtrA
DestroyWindow
DefWindowProcA
LoadCursorA
GetClassInfoExA
RegisterClassExA
ClientToScreen
LockWindowUpdate
KillTimer
GetForegroundWindow
VkKeyScanExA
LoadKeyboardLayoutA
MapVirtualKeyA
SetTimer
SendMessageA
GetKeyState
CharLowerBuffA
PostMessageA
FindWindowExA
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetClassNameA
SendInput
IsWindow
UnregisterClassA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Exports
Exports
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ