Static task
static1
Behavioral task
behavioral1
Sample
8d7bc1aaa90ab9b98a8f2220c433c013900a23ef5d3093802a5d7868e5e85259.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8d7bc1aaa90ab9b98a8f2220c433c013900a23ef5d3093802a5d7868e5e85259.dll
Resource
win10v2004-20220812-en
General
-
Target
8d7bc1aaa90ab9b98a8f2220c433c013900a23ef5d3093802a5d7868e5e85259
-
Size
131KB
-
MD5
3b05c6336ead9195301c20dce35055c0
-
SHA1
ddf4b22fccb76bcbba8d389b8b3284c348dce4cc
-
SHA256
8d7bc1aaa90ab9b98a8f2220c433c013900a23ef5d3093802a5d7868e5e85259
-
SHA512
7bddce0b07a8b8d273a2141533e2d3d64c0cfef1b66ad1186d015ba42910a965bb9f2be51275f93b566518cd30bfbd31b050e095b5e063b9ee1d79c7e33d6542
-
SSDEEP
3072:4f+ikJqk0gXXsNODhkDEcIVQdlxijUY8ZRCGMRQtr5w:4fdkJqvgMMDiQfV4YMB
Malware Config
Signatures
Files
-
8d7bc1aaa90ab9b98a8f2220c433c013900a23ef5d3093802a5d7868e5e85259.dll windows x86
c837b368ae29c0ae809a6920ae3e0a6f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
GetPriorityClass
GetModuleHandleW
LeaveCriticalSection
ResetEvent
LoadResource
GetProcessHeap
BuildCommDCBA
HeapAlloc
EnterCriticalSection
GetSystemTimeAsFileTime
InterlockedIncrement
OutputDebugStringW
UnhandledExceptionFilter
lstrcmpiW
CreateMutexW
WideCharToMultiByte
WaitForSingleObject
VirtualFree
GetModuleFileNameW
TerminateProcess
HeapFree
CreateThread
IsDebuggerPresent
SetLastError
GetVersionExW
LoadLibraryExW
ReleaseMutex
InterlockedExchange
WaitNamedPipeW
SetEvent
FlushInstructionCache
WaitForMultipleObjects
MultiByteToWideChar
CreateEventW
VirtualAlloc
FreeLibrary
GetCurrentProcess
InterlockedCompareExchange
TerminateThread
DeleteCriticalSection
Sleep
lstrlenW
FormatMessageW
LocalFree
GetCurrentThreadId
GetCurrentProcessId
FindResourceW
QueryPerformanceCounter
GetLastError
SetUnhandledExceptionFilter
InterlockedDecrement
IsProcessorFeaturePresent
RaiseException
GetStartupInfoW
LoadLibraryW
GetVersion
CloseHandle
VirtualProtect
LoadLibraryExA
GetModuleFileNameA
LoadLibraryA
GetLocalTime
GetProcAddress
ReadFile
GetTickCount
lstrlenA
CreateFileA
SizeofResource
ExitProcess
user32
DestroyWindow
DefWindowProcW
GetMessageW
AppendMenuW
CallWindowProcW
SetMenuItemInfoW
GetSysColorBrush
SetMenuDefaultItem
LoadImageW
DestroyMenu
RegisterWindowMessageW
GetMenuItemCount
SetTimer
PostMessageW
FillRect
TrackPopupMenu
GetClassInfoExW
KillTimer
CreateWindowExW
PostQuitMessage
DestroyIcon
GetSysColor
LoadStringW
GetSystemMetrics
LoadMenuW
SystemParametersInfoW
DrawIconEx
IsWindow
DrawTextW
GetMenuItemInfoW
ReleaseDC
SetForegroundWindow
FindWindowW
LoadCursorW
GetDoubleClickTime
IsMenu
GetDC
SetWindowLongW
CreatePopupMenu
TranslateMessage
RegisterClassExW
UnregisterClassA
GetWindowLongW
DeleteMenu
GetSubMenu
DispatchMessageW
CharNextW
GetCursorPos
gdi32
SetTextColor
DeleteObject
SelectObject
CreateFontIndirectW
SetBkColor
advapi32
RegQueryValueExW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
GetUserNameA
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegQueryInfoKeyW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
oleaut32
VarUI4FromStr
shlwapi
StrRChrA
msvcrt
_stricmp
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ