advapiclass
Static task
static1
Behavioral task
behavioral1
Sample
8ac0b98ab48402d09140615baa0b68c2765d3145c4bc63132daee5b35dbd9705.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8ac0b98ab48402d09140615baa0b68c2765d3145c4bc63132daee5b35dbd9705.dll
Resource
win10v2004-20221111-en
General
-
Target
8ac0b98ab48402d09140615baa0b68c2765d3145c4bc63132daee5b35dbd9705
-
Size
84KB
-
MD5
61550e5e901188e0d3aeb23e1a93f2cd
-
SHA1
8da5b21120dd52a1a1af1256aff44727c04bc77b
-
SHA256
8ac0b98ab48402d09140615baa0b68c2765d3145c4bc63132daee5b35dbd9705
-
SHA512
fdd45e891a10db84ad6c17fd871ab383e72ad8ef31f409eb79037b7c5959a7757366d491d516ee2cd523cc6a2cb74643c537a32dfe0e09eec5c01d6aad58ebdf
-
SSDEEP
1536:vpmaGhmo9JUwwTUmRCDRK2XFgMAnRweA31:v2/UvYOCDPXFgMAnM
Malware Config
Signatures
Files
-
8ac0b98ab48402d09140615baa0b68c2765d3145c4bc63132daee5b35dbd9705.dll windows x86
af90e71a086ceeafebf37e2c52a1854e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
GetCommandLineA
lstrlenW
InterlockedExchange
InterlockedDecrement
GetSystemDirectoryA
GetProcAddress
SetLastError
InterlockedIncrement
EnterCriticalSection
InterlockedCompareExchange
CreateMutexA
VirtualQuery
GetModuleHandleA
GetSystemTimeAsFileTime
CreateFileA
GetTickCount
HeapFree
UnmapViewOfFile
GetCurrentProcessId
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CloseHandle
WriteFile
WaitForSingleObject
SetConsoleTitleA
SizeofResource
GetFileAttributesExW
QueueUserWorkItem
WriteConsoleA
IsBadStringPtrA
ReplaceFileW
GetDateFormatA
CompareStringW
RemoveDirectoryW
CreateDirectoryW
GetExitCodeProcess
WinExec
OpenSemaphoreA
AddAtomA
GetUserDefaultUILanguage
LocalReAlloc
GetVolumeNameForVolumeMountPointW
WriteProcessMemory
FindFirstVolumeW
FindVolumeMountPointClose
GetVolumePathNameW
AllocConsole
GetBinaryTypeA
CancelIo
GetTimeZoneInformation
DosDateTimeToFileTime
CreateMutexW
GetNumberFormatW
CreateHardLinkW
GetVersionExA
RegisterWaitForSingleObjectEx
CompareStringA
SetWaitableTimer
GetBinaryTypeW
SetConsoleMode
GetCurrentProcess
GlobalMemoryStatus
WaitForMultipleObjectsEx
FlushViewOfFile
lstrcmpiW
MapViewOfFileEx
GetSystemTimeAdjustment
SetComputerNameA
CreateMailslotA
AreFileApisANSI
FindResourceW
BindIoCompletionCallback
LCMapStringW
HeapWalk
SetConsoleWindowInfo
GlobalFindAtomA
VerSetConditionMask
GetCurrentDirectoryW
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ