Static task
static1
Behavioral task
behavioral1
Sample
3cc6105381f5250fcd4ae97f3363ff7458dd8dbe6b7b5663be4303084cf1c58a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3cc6105381f5250fcd4ae97f3363ff7458dd8dbe6b7b5663be4303084cf1c58a.dll
Resource
win10v2004-20220812-en
General
-
Target
3cc6105381f5250fcd4ae97f3363ff7458dd8dbe6b7b5663be4303084cf1c58a
-
Size
256KB
-
MD5
8373c591f00507086f12b799568bc4b0
-
SHA1
883081de316d2afe46796a7fbcf128fd6c12a827
-
SHA256
3cc6105381f5250fcd4ae97f3363ff7458dd8dbe6b7b5663be4303084cf1c58a
-
SHA512
02d6a5c48e0f88cffa3c3ff33dd4b83a1ef350d11556d53867944e1cea21ded4b41a0a17d1de508e01ed3a9532c38ee1d118ae8e3874c5ff41e42870d7ae9eed
-
SSDEEP
6144:1qmHseJZIXAJKdXsHV5vSybNKFK0LWHkqjuMGPrN/rJ0KmgN45T:RcBX4d
Malware Config
Signatures
Files
-
3cc6105381f5250fcd4ae97f3363ff7458dd8dbe6b7b5663be4303084cf1c58a.dll windows x86
a0bb528c8cd2e5da53ef9ed79726913a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateFileA
lstrlenA
SuspendThread
DeleteFileA
SetEvent
CloseHandle
GetEnvironmentStrings
CreateSemaphoreA
ReadFile
IsDebuggerPresent
GetFileSize
GetLogicalDrives
ExitProcess
GetCurrentProcessId
GetComputerNameA
GetLastError
GetCommandLineA
GetVersion
CreateMutexA
GetSystemDefaultLangID
ResetEvent
lstrcatA
GetOEMCP
OutputDebugStringA
lstrcpyA
GetStdHandle
GetWindowsDirectoryA
GetTempPathA
CreateEventA
ResumeThread
FatalExit
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetVersionExA
ReleaseMutex
GetSystemDirectoryA
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
user32
SetCapture
GetParent
OpenClipboard
FindWindowA
GetFocus
EndPaint
DestroyWindow
IsWindow
CreateDialogParamA
InSendMessage
IsZoomed
GetDC
ReleaseDC
ShowWindow
DestroyIcon
GetCaretBlinkTime
ReleaseCapture
GetMessagePos
RegisterClassA
IsChild
GetActiveWindow
GetProcessWindowStation
GetSystemMetrics
UpdateWindow
GetDialogBaseUnits
GetForegroundWindow
GetClassInfoExA
SendMessageA
EndMenu
GetCursor
CopyIcon
GetMessageA
InSendMessageEx
CloseWindow
wsprintfA
ntdll
memcpy
ole32
CoUninitialize
CoInitialize
CoFreeUnusedLibraries
OleUninitialize
CoFreeAllLibraries
gdi32
DeleteDC
GdiFlush
LineTo
shlwapi
SHReleaseThreadRef
Sections
.text Size: 136KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ