laxu
Static task
static1
Behavioral task
behavioral1
Sample
f6df0998b178a9dca7a7cf888ba4131ffef8a1fd0b892d003452947e2e22b7f2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6df0998b178a9dca7a7cf888ba4131ffef8a1fd0b892d003452947e2e22b7f2.dll
Resource
win10v2004-20220812-en
General
-
Target
f6df0998b178a9dca7a7cf888ba4131ffef8a1fd0b892d003452947e2e22b7f2
-
Size
112KB
-
MD5
b7541e215e8d5f93068e8b11f5083461
-
SHA1
b82943955d287ce8fc8515a31f3e4bd86aaaf9e8
-
SHA256
f6df0998b178a9dca7a7cf888ba4131ffef8a1fd0b892d003452947e2e22b7f2
-
SHA512
e0d659d785dc6e2cdae46f5af436071b78a8a878e3932b16e3e626d5c10de57c065904331acc2503944e01226f48d952931c1e2f4fb1b93b7d3d816e1a5cf0b7
-
SSDEEP
3072:jy8Z1Q54awNY/JzfG+EAHz6/wYsMqhzgmQn:tQ5Um/EbAYwYVakmQ
Malware Config
Signatures
Files
-
f6df0998b178a9dca7a7cf888ba4131ffef8a1fd0b892d003452947e2e22b7f2.dll windows x86
c1022da150cf25c28e650c78740f0be1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
QueryPerformanceCounter
GetLocaleInfoA
GetModuleFileNameA
SetEvent
InterlockedExchange
GetEnvironmentStrings
WideCharToMultiByte
InitializeCriticalSection
GetFileType
IsBadReadPtr
GetACP
DisconnectNamedPipe
DeleteCriticalSection
RtlUnwind
ConnectNamedPipe
GetStartupInfoA
GetCPInfo
GetSystemTimeAsFileTime
TerminateProcess
HeapFree
IsBadCodePtr
GetStdHandle
SetLastError
CreateTimerQueueTimer
LCMapStringA
VirtualProtect
GetEnvironmentStringsW
ResetEvent
CreateEventA
GetOEMCP
lstrcpyW
SetUnhandledExceptionFilter
CreateMutexW
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsBadWritePtr
GetSystemInfo
LoadLibraryA
DeleteTimerQueueTimer
GetCurrentProcessId
WaitForSingleObject
CreateThread
UnmapViewOfFile
WriteFile
InterlockedDecrement
GetCurrentThreadId
HeapAlloc
LCMapStringW
CreateNamedPipeA
InterlockedCompareExchange
DuplicateHandle
WaitForMultipleObjects
FreeEnvironmentStringsA
LeaveCriticalSection
GetLastError
ReleaseMutex
GetModuleHandleA
OpenProcess
GetVersionExA
Sleep
GetTickCount
lstrcatW
MultiByteToWideChar
CopyFileA
EnterCriticalSection
VirtualQuery
InterlockedExchangeAdd
user32
DrawIcon
CreateIconFromResource
wsprintfW
LoadIconA
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
Exports
Exports
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ