ENTRYPOINT
Static task
static1
Behavioral task
behavioral1
Sample
4c99f67d2605bbeebd6bcbac666d544a0dcf73dc44467dc9310731619bdf648c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c99f67d2605bbeebd6bcbac666d544a0dcf73dc44467dc9310731619bdf648c.dll
Resource
win10v2004-20221111-en
General
-
Target
4c99f67d2605bbeebd6bcbac666d544a0dcf73dc44467dc9310731619bdf648c
-
Size
472KB
-
MD5
b8885ae832e13fc5a6d246dc5152fdba
-
SHA1
efed9bbcc50d79eb1297e42d8891ae5545258322
-
SHA256
4c99f67d2605bbeebd6bcbac666d544a0dcf73dc44467dc9310731619bdf648c
-
SHA512
4d57f68298dcd71ae3adacb6e27fa0cc5a472cb7961b7e428778bc12192325e4253328181e2d30a51a447ec70a00447b03ad2dccdf8077dfc203e8ba4934daf2
-
SSDEEP
12288:jEE/osu1mlD7KZrgoFvzUo/r88XWWhhmDAcj:jzwx1moZrbvzUP8XW4Mj
Malware Config
Signatures
Files
-
4c99f67d2605bbeebd6bcbac666d544a0dcf73dc44467dc9310731619bdf648c.dll windows x86
ff44d77318e7bcd3e715cb34f3611aad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr70
_except_handler3
?terminate@@YAXXZ
_iob
??1type_info@@UAE@XZ
_CIpow
fprintf
time
isspace
isdigit
_setjmp3
longjmp
_snprintf
calloc
_vsnprintf
_ftol
_finite
_CIacos
_ltoa
_unlink
_lseek
qsort
atoi
sprintf
??_U@YAPAXI@Z
??_V@YAXPAX@Z
floor
printf
exit
malloc
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
free
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
kernel32
LocalFree
DebugBreak
GetLastError
GetProcAddress
LoadLibraryA
GetSystemInfo
IsProcessorFeaturePresent
GetProfileIntA
FatalAppExitA
_lwrite
_lread
WriteFile
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
lstrcpyA
lstrcatA
GlobalLock
GlobalUnlock
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceA
GlobalAlloc
GlobalHandle
GlobalFree
MulDiv
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
OutputDebugStringA
UnmapViewOfFile
GetVersionExA
CreateFileW
CreateFileMappingA
MapViewOfFile
FormatMessageA
user32
GetIconInfo
IsDlgButtonChecked
GetParent
GetDesktopWindow
ClientToScreen
GetSystemMetrics
SetCursor
GetSubMenu
TrackPopupMenuEx
PostQuitMessage
GetCursorPos
MessageBoxA
ScreenToClient
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
SetRect
SendMessageA
DestroyWindow
DestroyMenu
GetMenu
ShowWindow
LoadStringA
AdjustWindowRect
LoadMenuA
CreateWindowExA
GetWindowLongA
GetWindowRect
LoadAcceleratorsA
PeekMessageA
TranslateAcceleratorA
SetWindowPos
SetWindowLongA
GetClassLongA
SetActiveWindow
CreateDialogParamA
UpdateWindow
GetFocus
PostMessageA
GetDlgCtrlID
SendDlgItemMessageA
DialogBoxParamA
EndDialog
EnableWindow
CheckDlgButton
MessageBeep
SetFocus
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
CheckRadioButton
GetClientRect
GetDC
ReleaseDC
wsprintfA
gdi32
SetTextColor
SelectObject
CreateFontA
GetDeviceCaps
SetTextAlign
CreateDIBSection
CreateCompatibleDC
GetDIBits
GetObjectA
GetTextExtentPoint32A
DeleteObject
DeleteDC
GetStockObject
ExtTextOutA
SetMapMode
SetBkColor
comdlg32
ChooseColorA
GetOpenFileNameA
advapi32
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
d3d8
Direct3DCreate8
winmm
timeGetTime
Exports
Exports
Sections
.text Size: 324KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ