hfqw
Static task
static1
Behavioral task
behavioral1
Sample
feb3b3c97ec09fb4d4a30c1786e99821b432cf842f583ce2226c01bb0c57be85.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
feb3b3c97ec09fb4d4a30c1786e99821b432cf842f583ce2226c01bb0c57be85.dll
Resource
win10v2004-20220901-en
General
-
Target
feb3b3c97ec09fb4d4a30c1786e99821b432cf842f583ce2226c01bb0c57be85
-
Size
179KB
-
MD5
31c029dba1f0921f1a417f56313a3780
-
SHA1
386943e3a5c3c8d7ebfb4dc30925ac2014260aed
-
SHA256
feb3b3c97ec09fb4d4a30c1786e99821b432cf842f583ce2226c01bb0c57be85
-
SHA512
9dee48bacfd261a6adce2c392cf697593aa89a93aa3f355882e98036d13f7e8bb6350bf88eecf7f38cf45fe50671becd195e697802a5d0db488be693f7c611c5
-
SSDEEP
3072:lcOe7Tvp1YgM0j/WQ0LrWHtRn/QleKLS5Ts5OYvPKSn5Y/:OOuYyjOjrWHf8eAAwMwyd
Malware Config
Signatures
Files
-
feb3b3c97ec09fb4d4a30c1786e99821b432cf842f583ce2226c01bb0c57be85.dll windows x86
aec060bca921410be01dc5115539b012
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AssignProcessToJobObject
CloseHandle
CommConfigDialogA
EnumCalendarInfoExA
EnumLanguageGroupLocalesW
FatalAppExitW
FileTimeToSystemTime
FindFirstVolumeMountPointW
FindNextChangeNotification
FormatMessageA
FreeLibrary
GetAtomNameA
GetComputerNameW
GetConsoleAliasA
GetDefaultCommConfigA
GetDiskFreeSpaceExA
GetEnvironmentVariableW
GetHandleInformation
GetLocalTime
GetModuleFileNameW
GetPrivateProfileSectionW
GetProcAddress
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTapeStatus
GetTimeFormatA
GetTimeZoneInformation
GetVersionExW
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
LoadLibraryW
LocalAlloc
LocalFree
MoveFileExA
MoveFileExW
OutputDebugStringW
Process32FirstW
QueryPerformanceFrequency
ReadConsoleOutputCharacterW
ReadFileScatter
RequestWakeupLatency
SetConsoleCursorInfo
SetConsoleTitleW
SetEvent
SetFileApisToANSI
SetStdHandle
SetSystemPowerState
SetSystemTime
SignalObjectAndWait
Sleep
SwitchToThread
SystemTimeToFileTime
VerLanguageNameW
VirtualAlloc
VirtualQuery
WaitCommEvent
WaitForSingleObject
WideCharToMultiByte
WritePrivateProfileStructA
_llseek
lstrcpy
GetLastError
GetCurrentThreadId
DecodePointer
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringW
MultiByteToWideChar
FatalAppExitA
RtlUnwind
HeapAlloc
HeapReAlloc
SetConsoleCtrlHandler
GetLocaleInfoW
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
WriteConsoleW
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
ReadFile
CreateFileW
ole32
UpdateDCOMSettings
OleCreateFromData
OleConvertIStorageToOLESTREAM
HDC_UserMarshal
FmtIdToPropStgName
CoTaskMemFree
CoTaskMemAlloc
CoRegisterPSClsid
CoReactivateObject
CoIsHandlerConnected
CoGetCurrentLogicalThreadId
CoGetCallerTID
shell32
SHFileOperation
FindExecutableW
ExtractIconExA
ExtractAssociatedIconW
ExtractAssociatedIconExW
DragQueryFileA
SHFormatDrive
user32
PrivateExtractIconsW
LoadImageW
RealGetWindowClassA
GetDlgCtrlID
GetActiveWindow
SetLayeredWindowAttributes
SetProcessDefaultLayout
SetWindowsHookExA
SetWindowsHookExW
WindowFromPoint
wsprintfA
GetLastActivePopup
CharNextExA
AnimateWindow
AppendMenuA
ArrangeIconicWindows
ChangeDisplaySettingsW
CharLowerA
CharUpperBuffA
CloseWindow
CreateAcceleratorTableA
CreateDialogParamW
DestroyMenu
DlgDirSelectExA
DrawIconEx
DrawTextExW
EnableMenuItem
EnumChildWindows
EnumDesktopsA
FindWindowExW
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ