Static task
static1
Behavioral task
behavioral1
Sample
4a476b921767601dfe5b879b7fc8f786d6e1d3ec3a41c375e84877ce069425c1.dll
Resource
win7-20220812-en
General
-
Target
4a476b921767601dfe5b879b7fc8f786d6e1d3ec3a41c375e84877ce069425c1
-
Size
155KB
-
MD5
938da69ac65a0e3d7f21b51055c95d1d
-
SHA1
a987e2b99ba5ca16cacfcc5724ba91d5197c1b72
-
SHA256
4a476b921767601dfe5b879b7fc8f786d6e1d3ec3a41c375e84877ce069425c1
-
SHA512
a977544157476bce34254f8426eae01abb5101a47a6abbcdac217a2db4fe83f427747cd7bab528833378a00172ed60849503a2571308ebd2c2bf29aa8b5d1d24
-
SSDEEP
3072:wCiXThpTCohRxrrJF7aY42gXN31dK1yLjEeti:wCiXNpCo3xR1bov1Ljzti
Malware Config
Signatures
Files
-
4a476b921767601dfe5b879b7fc8f786d6e1d3ec3a41c375e84877ce069425c1.dll windows x86
8dbb33a93aa75daa8ea0a3ccca81f95f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
GetModuleFileNameA
CreateThread
ExitProcess
IsBadWritePtr
GetModuleHandleA
Sleep
VirtualAlloc
MulDiv
VirtualProtect
GetCurrentProcess
IsDebuggerPresent
InterlockedExchange
GetSystemTimeAsFileTime
user32
GetAsyncKeyState
MessageBoxA
RegisterClassExA
GetDesktopWindow
CreateWindowExA
DestroyWindow
DefWindowProcA
GetSystemMetrics
gdi32
CreateDIBSection
SetMapMode
GetDeviceCaps
CreateFontA
SelectObject
SetTextColor
SetBkColor
SetTextAlign
GetTextExtentPoint32A
ExtTextOutA
DeleteObject
DeleteDC
CreateCompatibleDC
msvcr90
strstr
_mbsnbcpy
malloc
free
memmove
??2@YAPAXI@Z
memset
system
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memcpy
ceil
d3d9
Direct3DCreate9
Sections
_TEXT Size: 512B - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE