CreateCrackCaptchaClient
Static task
static1
Behavioral task
behavioral1
Sample
fe73a7f024b7e0a218d1b42f18b7782d9dc5cf8bc0775b64f601b3f799b85b1a.dll
Resource
win7-20220812-en
General
-
Target
fe73a7f024b7e0a218d1b42f18b7782d9dc5cf8bc0775b64f601b3f799b85b1a
-
Size
1.4MB
-
MD5
6f47d50831eb2529d5826cb1f3c1bc59
-
SHA1
fef8837a089d71ac3c1d45582bc7b585f28fcf4d
-
SHA256
fe73a7f024b7e0a218d1b42f18b7782d9dc5cf8bc0775b64f601b3f799b85b1a
-
SHA512
73a114ff351366dd702c11dacffa270bf452674fd02043e36b834c092fc73fcb8546b351c4e0339fb2a6a113eb7f861046db3ebdaf07d25b8b2bfe2783fb1bfc
-
SSDEEP
24576:AJ+jOTpHRW6r0+5dWOe84YV5Kl+xfpfuCXZ2n0QdAFj9B9GyThHgnaD:AJ+jOTpRrn4YVxxfVXmdY9rTh2a
Malware Config
Signatures
Files
-
fe73a7f024b7e0a218d1b42f18b7782d9dc5cf8bc0775b64f601b3f799b85b1a.dll windows x86
a1e22ef993dd9f3dccb9f868cf8dd6cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
getpeername
ntohs
htonl
ntohl
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect
WSAResetEvent
recv
send
connect
htons
WSACloseEvent
WSACreateEvent
ioctlsocket
socket
inet_addr
WSAGetLastError
closesocket
inet_ntoa
gethostbyname
gethostname
WSACleanup
WSAStartup
kernel32
FlushFileBuffers
CloseHandle
WaitForMultipleObjects
lstrlenA
LoadLibraryA
GetProcAddress
CreateFileA
DeviceIoControl
GetVersionExA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
WaitForSingleObject
CreateEventA
SetEvent
HeapCreate
GetDriveTypeW
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
ResetEvent
SystemTimeToFileTime
GetCurrentProcess
MulDiv
GetCurrentDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
Sleep
WriteFile
FreeLibrary
CreateSemaphoreA
ReleaseSemaphore
GetStringTypeW
LCMapStringW
LoadLibraryW
HeapReAlloc
GetConsoleMode
SetEndOfFile
GetFileAttributesA
ReadFile
WriteConsoleW
CreateFileW
CompareStringW
SetEnvironmentVariableA
GlobalFree
GlobalAlloc
GetConsoleCP
SetFilePointer
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentDirectoryW
PeekNamedPipe
HeapDestroy
EncodePointer
DecodePointer
ExitThread
CreateThread
FindClose
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
DeleteFileA
MoveFileA
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetTimeZoneInformation
HeapSize
GetModuleHandleW
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
RtlUnwind
SetHandleCount
GetFileType
GetStartupInfoW
GetFullPathNameA
GetFileInformationByHandle
SetStdHandle
user32
GetSysColor
IsRectEmpty
GetWindowRect
ScreenToClient
GetSystemMetrics
GetDC
GetWindowDC
ReleaseDC
FindWindowExA
gdi32
CreatePalette
SelectPalette
RealizePalette
PlayEnhMetaFile
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
DeleteEnhMetaFile
GetDeviceCaps
SetWinMetaFileBits
CreateCompatibleDC
ExtTextOutA
SetBkColor
SetEnhMetaFileBits
BitBlt
SelectObject
DeleteObject
CreateCompatibleBitmap
DeleteDC
GetDIBits
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
wininet
InternetCloseHandle
InternetOpenA
HttpQueryInfoA
InternetOpenUrlA
InternetReadFile
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: 1022KB - Virtual size: 1021KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 279KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE