Static task
static1
Behavioral task
behavioral1
Sample
00be19fe4a59c67eb914a9f71c0f3f8d65007eab36386e3cb548bca4c5876545.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00be19fe4a59c67eb914a9f71c0f3f8d65007eab36386e3cb548bca4c5876545.dll
Resource
win10v2004-20220901-en
General
-
Target
00be19fe4a59c67eb914a9f71c0f3f8d65007eab36386e3cb548bca4c5876545
-
Size
111KB
-
MD5
a3a5568e4ce17e9bbbcf373afbd50396
-
SHA1
762b4a1f6b12299504da9190cdd6f903546bd6b1
-
SHA256
00be19fe4a59c67eb914a9f71c0f3f8d65007eab36386e3cb548bca4c5876545
-
SHA512
81312df191eae3f2248158d6c6fe0f0a1ba6b7d54d6c96a44586d8fe4ce7ba26d929c6b750920a61089d8283ac45231e4174d6da413ec776df660f0ccc719380
-
SSDEEP
3072:Oqhq75xqRqhGBjvOeJI97o6PfiZy+lKkxdM/2GK0FXR6:PqtxMiGBjvjYPfi
Malware Config
Signatures
Files
-
00be19fe4a59c67eb914a9f71c0f3f8d65007eab36386e3cb548bca4c5876545.dll windows x86
2ec2945b64347fc74a6be5ac60a3080d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
InterlockedExchange
InterlockedCompareExchange
GetSystemDirectoryW
GetCommandLineW
GetEnvironmentVariableW
lstrlenW
GetLastError
GetSystemWindowsDirectoryW
CreateFileW
FindFirstFileW
GetTickCount
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
LocalFree
WideCharToMultiByte
FormatMessageW
GetConsoleMode
GetFileType
GetStdHandle
WriteFile
WriteConsoleW
GetConsoleOutputCP
MultiByteToWideChar
ReadConsoleW
LoadLibraryA
FreeLibrary
QueryPerformanceCounter
DisableThreadLibraryCalls
GetModuleFileNameW
LoadLibraryW
GlobalFree
VirtualProtect
GlobalAlloc
FindClose
GetCommandLineA
user32
LoadStringA
GetUserObjectInformationW
GetProcessWindowStation
advapi32
RegCloseKey
EnableTrace
ControlTraceW
TraceMessage
RegOpenKeyExW
RegisterTraceGuidsW
RegQueryValueExW
StartTraceW
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
msvcr71
_wcsicmp
__dllonexit
__CppXcptFilter
_adjust_fdiv
_initterm
malloc
_wcsupr
_except_handler3
wcsrchr
_vsnprintf
exit
_ismbblead
_cexit
memcpy
memmove
free
_onexit
_wcsnicmp
_wcslwr
wcschr
memset
_amsg_exit
_iob
fgets
strchr
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ