CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
141886d0535254f6b8111ddc1f00fc44049a955fee63995d554276bb771bb5c0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
141886d0535254f6b8111ddc1f00fc44049a955fee63995d554276bb771bb5c0.dll
Resource
win10v2004-20220901-en
General
-
Target
141886d0535254f6b8111ddc1f00fc44049a955fee63995d554276bb771bb5c0
-
Size
556KB
-
MD5
81c19dcd782ba44275d0e0cf8d710903
-
SHA1
a4857b2b722a3ca122900dd04f890b74d69968ac
-
SHA256
141886d0535254f6b8111ddc1f00fc44049a955fee63995d554276bb771bb5c0
-
SHA512
304e6f328351cd7b45a75b3a2ebbaacb0fe84848da84773185783ce0a3769ec1deefee4b20970a457d247349094a42c6a9a0cfd08aa5612e18c6e4653d753985
-
SSDEEP
12288:CgbBF9TSs8ATIKf6ijvYADuQ7Qyd+D5U1Im3pHQCaOOfI:3FFZSs8SWijvYADuQ7Qyck9IhI
Malware Config
Signatures
Files
-
141886d0535254f6b8111ddc1f00fc44049a955fee63995d554276bb771bb5c0.dll windows x86
41ec986a0d5d609465d0bdeeeddfb19d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
InitializeCriticalSection
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
OutputDebugStringA
HeapAlloc
GetProcessHeap
GetNumberOfConsoleInputEvents
PeekConsoleInputA
LeaveCriticalSection
GetCurrentProcess
TerminateProcess
SetConsoleTextAttribute
GetStdHandle
VirtualQuery
GetConsoleScreenBufferInfo
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetLocaleInfoW
SetEndOfFile
SetConsoleCtrlHandler
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CompareStringW
CompareStringA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetTimeZoneInformation
GetOEMCP
GetACP
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
CreateFileA
InterlockedExchange
DeleteCriticalSection
GetProcAddress
LoadLibraryA
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
GetLastError
CreateDirectoryA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
GetFileAttributesA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
ExitProcess
CloseHandle
WriteFile
SetHandleCount
GetFileType
GetStartupInfoA
FatalAppExitA
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetFilePointer
ReadFile
SetEnvironmentVariableW
VirtualProtect
VirtualAlloc
GetSystemInfo
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
RaiseException
SetStdHandle
FlushFileBuffers
WriteConsoleA
user32
SendMessageTimeoutA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
tier0
Warning
Msg
?DevMsg@@YAXPBDZZ
MemAllocScratch
MemFreeScratch
DevMsg
?Lock@CThreadMutex@@QAEXXZ
?Lock@CThreadMutex@@QBEXXZ
g_pMemAlloc
SpewOutputFunc
GetCPUInformation
Error
vstdlib
Q_strcasecmp
Q_snprintf
Q_FixSlashes
Q_strncasecmp
Q_strncpy
Q_StripExtension
Q_strncat
Q_ExtractFilePath
Q_StrRight
Q_StripFilename
Q_AppendSlash
CommandLine
Q_StripLastDir
Q_MakeAbsolutePath
?Q_stristr@@YAPBDPBD0@Z
Q_StripTrailingSlash
Q_strnistr
Q_strncmp
Q_IsAbsolutePath
Q_strnchr
KeyValuesSystem
Q_vsnprintf
Exports
Exports
Sections
.text Size: 228KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 60.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE