CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
9aa81443727915179d167355d653ca9cd7063d6ecdc533f83d0d7ebcd0b55d87.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9aa81443727915179d167355d653ca9cd7063d6ecdc533f83d0d7ebcd0b55d87.dll
Resource
win10v2004-20220812-en
General
-
Target
9aa81443727915179d167355d653ca9cd7063d6ecdc533f83d0d7ebcd0b55d87
-
Size
420KB
-
MD5
0c74d12973616cdd9745987962c36f60
-
SHA1
d1344ccb34b30317c75ee89082482ff77d6c5c78
-
SHA256
9aa81443727915179d167355d653ca9cd7063d6ecdc533f83d0d7ebcd0b55d87
-
SHA512
47dbd9beef820c8065ab04bd5d97405bfa4b966107e6d53dc08d0d4f35070f4f11d5f9402232654902da3e48a615a1bb136312f1f61f6c3632020adf8fd83977
-
SSDEEP
12288:Kt2gQPqyJEHv1CSNycS5bZElBe72nT9P+hSYayQV9qUKtYMsnMF:sQkvEZElBs2npGSYayK9qUYR
Malware Config
Signatures
Files
-
9aa81443727915179d167355d653ca9cd7063d6ecdc533f83d0d7ebcd0b55d87.dll windows x86
fba39bd87bb5802ab1f62f3ebbcacb3c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
LeaveCriticalSection
OutputDebugStringA
EnterCriticalSection
InitializeCriticalSection
GetEnvironmentVariableA
GetModuleFileNameA
TerminateProcess
VirtualQuery
HeapAlloc
GetProcessHeap
FindNextFileA
FindClose
FindFirstFileA
SetConsoleTextAttribute
GetStdHandle
GetModuleHandleA
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
PeekConsoleInputA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetLocaleInfoW
SetEndOfFile
RaiseException
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileA
SetStdHandle
CreateProcessA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
LoadLibraryA
FreeLibrary
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
GetLastError
CreateDirectoryA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
ExitProcess
DeleteCriticalSection
FatalAppExitA
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetFileType
GetStartupInfoA
SetEnvironmentVariableW
CloseHandle
ReadFile
SetFilePointer
VirtualProtect
VirtualAlloc
GetSystemInfo
GetACP
GetOEMCP
GetCPInfo
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
InterlockedExchange
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetTimeZoneInformation
FlushFileBuffers
CompareStringA
CompareStringW
GetExitCodeProcess
WaitForSingleObject
WriteConsoleA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
tier0
DevMsg
_AssertValidReadPtr
_AssertValidWritePtr
AssertValidStringPtr
GetCPUInformation
MemAllocScratch
MemFreeScratch
CommandLine_Tier0
Warning
Error
SpewOutputFunc
g_pMemAlloc
Msg
?DevMsg@@YAXPBDZZ
vstdlib
KeyValuesSystem
Exports
Exports
Sections
.text Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE