Static task
static1
Behavioral task
behavioral1
Sample
beff6ae2558923fd5752e6d36b1f9bad1eb84ef455c68bd1b20ab6f5bcc9ee45.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
beff6ae2558923fd5752e6d36b1f9bad1eb84ef455c68bd1b20ab6f5bcc9ee45.dll
Resource
win10v2004-20220812-en
General
-
Target
beff6ae2558923fd5752e6d36b1f9bad1eb84ef455c68bd1b20ab6f5bcc9ee45
-
Size
245KB
-
MD5
217cd96e36ffece34ce42c2771889420
-
SHA1
e15b8368308b6740fc8b77fc85114726750edcc6
-
SHA256
beff6ae2558923fd5752e6d36b1f9bad1eb84ef455c68bd1b20ab6f5bcc9ee45
-
SHA512
ffb12fff9585edf5e58ef8293824f49c35123b043e99c4cee0b13f03eede10dbd93f5a9a6e2874cf70586aa0acd3d2d9ee99afc5b3aee075557e81263f09f0ca
-
SSDEEP
6144:rus1SsNHGiWexA9O1DW7ZKDxD/4y639KPdPDK:ZGiI9O1iuF4y639KPlm
Malware Config
Signatures
Files
-
beff6ae2558923fd5752e6d36b1f9bad1eb84ef455c68bd1b20ab6f5bcc9ee45.dll windows x86
c131387707c5c3e029a5b66954fd2fe0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetLocalTime
GetLocaleInfoA
GetSystemTime
GetTickCount
QueryPerformanceCounter
ReleaseMutex
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
GetFileSize
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteFile
lstrcmpA
lstrcmpiA
lstrlenA
GetDiskFreeSpaceA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateMutexA
CreateFileA
CreateDirectoryA
CreateFileW
CloseHandle
VirtualAlloc
TlsAlloc
user32
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
IsDlgButtonChecked
GetParent
GetDlgItem
GetDesktopWindow
DispatchMessageA
DialogBoxParamA
DestroyWindow
CreateDialogParamA
CheckDlgButton
CharPrevA
LoadCursorA
LoadIconA
IsDialogMessageA
TranslateMessage
GetWindowRect
EndDialog
advapi32
RegOpenKeyW
RegCloseKey
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegOverridePredefKey
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
ole32
CoTaskMemRealloc
CoInitialize
CoGetMalloc
CoCreateInstance
CoUninitialize
shlwapi
StrFormatByteSize64A
wnsprintfA
comctl32
InitCommonControlsEx
Sections
FFF Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ