crashHandler
Static task
static1
Behavioral task
behavioral1
Sample
88e785f30beb2c27536c20c9c51ab164a55e979bba4ac68bc12fb9c42b4d6c46.dll
Resource
win7-20220901-en
General
-
Target
88e785f30beb2c27536c20c9c51ab164a55e979bba4ac68bc12fb9c42b4d6c46
-
Size
355KB
-
MD5
300869b98179c9b4f267227983636390
-
SHA1
b0fad60f2c503d45c2ad6f56b985060a08668e88
-
SHA256
88e785f30beb2c27536c20c9c51ab164a55e979bba4ac68bc12fb9c42b4d6c46
-
SHA512
c37bda9fe749ab4c59d56919fca6ab58c1c1d98b7b4f96f44a259c77c5dfc7a1dd2a646fb2dfb911f88aa8bd7d5276cb3e90bc754866219306cf82aaa632c6c8
-
SSDEEP
6144:XSU51ojBfFFkGWaNZ2jidP2hbiW2azNXIMk4JYnYxUZcb/r9uvXax:CUAjBfzkGpP2jidPoiW2azNX/k4JYnq1
Malware Config
Signatures
Files
-
88e785f30beb2c27536c20c9c51ab164a55e979bba4ac68bc12fb9c42b4d6c46.dll windows x86
523687f2b83bbf8fa4144b5c7d5cc07a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
AccessibleObjectFromWindow
AccessibleObjectFromPoint
kernel32
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
lstrlenA
CreateEventA
WaitForSingleObject
SetEvent
InterlockedDecrement
GetProcAddress
LoadLibraryA
FreeLibrary
LocalFree
OpenProcess
CloseHandle
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetModuleHandleA
TerminateProcess
GetTickCount
GetCurrentProcessId
LoadLibraryExA
GetCommandLineA
GetCurrentThreadId
FlushInstructionCache
SetLastError
RaiseException
InterlockedIncrement
DeleteCriticalSection
LoadLibraryExW
VirtualQuery
VirtualFree
VirtualAlloc
LeaveCriticalSection
GetThreadContext
HeapReAlloc
SetThreadContext
HeapAlloc
HeapFree
Sleep
HeapDestroy
HeapCreate
OpenThread
VirtualProtect
SuspendThread
ResumeThread
ResetEvent
GetNamedPipeHandleStateA
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
DecodePointer
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
GetStringTypeW
GetLocaleInfoW
GetModuleFileNameW
GetStdHandle
WriteFile
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
ExitProcess
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
GetCPInfo
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetSystemTimeAsFileTime
RtlUnwind
GetSystemInfo
FlushFileBuffers
LocalAlloc
InterlockedExchange
HeapSize
GetProcessHeap
InterlockedCompareExchange
InterlockedPushEntrySList
IsProcessorFeaturePresent
InterlockedPopEntrySList
InitializeCriticalSection
EncodePointer
CompareStringW
user32
IsWindowVisible
CallNextHookEx
RegisterWindowMessageA
CallWindowProcA
CreateWindowExA
GetWindowLongA
SetWindowLongA
DestroyWindow
DefWindowProcA
LoadCursorA
GetClassInfoExA
RegisterClassExA
ClientToScreen
LockWindowUpdate
KillTimer
GetForegroundWindow
VkKeyScanExA
LoadKeyboardLayoutA
MapVirtualKeyA
SetTimer
SendMessageA
GetKeyState
IsWindow
CharLowerBuffA
PostMessageA
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetClassNameA
SendInput
FindWindowExA
UnregisterClassA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Exports
Exports
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE