userCommsHelper
Static task
static1
Behavioral task
behavioral1
Sample
126adfae1c04758c7f89fe30131ff8534c8864dd1daba534cacf8bd71447b087.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
126adfae1c04758c7f89fe30131ff8534c8864dd1daba534cacf8bd71447b087.dll
Resource
win10v2004-20220812-en
General
-
Target
126adfae1c04758c7f89fe30131ff8534c8864dd1daba534cacf8bd71447b087
-
Size
120KB
-
MD5
0d138baa35662ac08e2f93f1d6a14815
-
SHA1
0556c2c9e92098b07e1a3c48ec6554852281c9e1
-
SHA256
126adfae1c04758c7f89fe30131ff8534c8864dd1daba534cacf8bd71447b087
-
SHA512
8c9847b43d3acfdd8c5d9835f95d5c2bb5e66876140739d5ffa3446c8eb1157e3c85486d920fcb75f81540f3a801b60ea9e35187f8f4bbd5d30aa013c27eaaac
-
SSDEEP
3072:C1ociauRZPEUbv+As1IkAVnJkX6jxkhb:CCPauMtxIFSXakh
Malware Config
Signatures
Files
-
126adfae1c04758c7f89fe30131ff8534c8864dd1daba534cacf8bd71447b087.dll windows x86
26e5b8623280eb590e736f78735e35f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetTickCount
LocalFree
GetProcAddress
EnterCriticalSection
GetCommandLineA
WaitForSingleObject
MapViewOfFile
SetLastError
UnmapViewOfFile
GetLastError
LeaveCriticalSection
GetModuleFileNameA
InterlockedCompareExchange
InterlockedIncrement
Sleep
GetModuleHandleA
CreateProcessA
LoadLibraryA
ole32
CreateBindCtx
OleSetContainedObject
OleCreate
CoUninitialize
CoInitialize
CoCreateGuid
user32
GetParent
CreateWindowExA
RegisterWindowMessageA
SetWindowLongA
DestroyWindow
SetTimer
PostQuitMessage
GetSystemMetrics
PostMessageA
GetWindowLongA
FindWindowA
DefWindowProcA
GetMessageA
TranslateMessage
GetClassNameA
KillTimer
DispatchMessageA
SendMessageA
advapi32
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
Exports
Exports
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ