DriverProc
Static task
static1
Behavioral task
behavioral1
Sample
1d026bd8aa73bef4a4f951fb226c379f5f4940fca6a7d3702077fc6206fa2091.dll
Resource
win7-20221111-en
General
-
Target
1d026bd8aa73bef4a4f951fb226c379f5f4940fca6a7d3702077fc6206fa2091
-
Size
676KB
-
MD5
315b887541d36a32a6c8a27902b2a750
-
SHA1
d97bcd20de58d861fc10a37a51a7d9646bc07c3f
-
SHA256
1d026bd8aa73bef4a4f951fb226c379f5f4940fca6a7d3702077fc6206fa2091
-
SHA512
4d506902b8e278a89549446e9e98cb08ae7be630bd7a77845b9fdd757915f55b9c9cc3a70eb3620acbe9f3952a855106ef7e1c576bc43f415b5e6143d5de29a8
-
SSDEEP
12288:jdjcG6IRZdIsckWjPnXdunNXE54VDt3x7RtUti0TRXDr+6AZpLcq:jBH6IR/Is3W7nXdun5E5I7fUt6Dhcq
Malware Config
Signatures
Files
-
1d026bd8aa73bef4a4f951fb226c379f5f4940fca6a7d3702077fc6206fa2091.dll windows x86
2db58069391b37a70e1d0410a28e2a7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
DefDriverProc
timeGetTime
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetTickCount
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetCommandLineA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetEnvironmentVariableA
GetLocaleInfoW
WritePrivateProfileStringA
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
SetErrorMode
InterlockedDecrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
CloseHandle
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetProcAddress
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
lstrcpynA
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentThread
GetThreadContext
GetCurrentProcess
VirtualQueryEx
FormatMessageA
LocalFree
CompareStringW
CompareStringA
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetModuleHandleA
GetModuleFileNameA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrlenA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
user32
ReleaseCapture
CharNextA
MapDialogRect
SetWindowContextHelpId
wsprintfA
RegisterClipboardFormatA
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ClientToScreen
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
IsChild
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
SetCapture
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
CopyRect
PtInRect
GetWindow
GetWindowTextA
GetFocus
GetParent
SetWindowPos
SetFocus
IsWindowEnabled
MoveWindow
GetDlgCtrlID
IsDialogMessageA
GetMenuState
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
SetRect
IsRectEmpty
EndPaint
BeginPaint
GetWindowDC
DispatchMessageA
GrayStringA
GetMenuItemID
GetMenuItemCount
GetSubMenu
LoadImageA
SetWindowTextA
DialogBoxParamA
SendMessageA
DestroyWindow
CreateDialogParamA
ShowWindow
PostMessageA
EndDialog
UnregisterClassA
GetDlgItemTextA
MessageBoxA
SetDlgItemTextA
GetWindowLongA
SendDlgItemMessageA
GetDlgItemInt
SetWindowLongA
CheckDlgButton
SetDlgItemInt
GetDlgItem
EnableWindow
CharUpperA
GetMenu
gdi32
ExtSelectClipRgn
DeleteDC
TextOutA
ScaleWindowExtEx
CreateRectRgnIndirect
GetRgnBox
GetBkColor
GetTextColor
GetMapMode
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetClipBox
GetDeviceCaps
GetStockObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
DeleteObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
Escape
comdlg32
GetOpenFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
comctl32
ord17
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
oledlg
ord8
ole32
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
oleaut32
SystemTimeToVariantTime
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
SysAllocStringByteLen
LoadRegTypeLi
DispCallFunc
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
VarBstrCmp
SysAllocString
OleCreateFontIndirect
SysFreeString
dbghelp
UnDecorateSymbolName
StackWalk
SymGetModuleInfo
SymUnDName
SymLoadModule
SymSetOptions
SymGetSymFromAddr
SymGetOptions
SymInitialize
SymCleanup
SymGetLineFromAddr
SymGetLineFromAddr64
SymFunctionTableAccess
Exports
Exports
Sections
.text Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE