Static task
static1
Behavioral task
behavioral1
Sample
956b6aae7b5fadb5808681725e7025e82cc7680163269bb594c4fb854222a188.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
956b6aae7b5fadb5808681725e7025e82cc7680163269bb594c4fb854222a188.dll
Resource
win10v2004-20220812-en
General
-
Target
956b6aae7b5fadb5808681725e7025e82cc7680163269bb594c4fb854222a188
-
Size
664KB
-
MD5
8f7084e50aad9a8c95af8e163b17fc09
-
SHA1
087c85a661e9bb7c6c1a7836d11d2443fe334329
-
SHA256
956b6aae7b5fadb5808681725e7025e82cc7680163269bb594c4fb854222a188
-
SHA512
497d1d11cc729cf16f3d70a32d23ddbb8468e229c67963214bd6b5398ac59c309864ca1697eb271d344e58c283f88eebce6e7ebd72ade5cc2d3fa905ccd5bc58
-
SSDEEP
12288:d5vLKmv05HNrMeSn3LV1UZi5EdIW0L5Rzf2pNmDuBE2kXciz8h/6klLGm6:rvderM33LUZF6LTzf2p4l1PN6LGR
Malware Config
Signatures
Files
-
956b6aae7b5fadb5808681725e7025e82cc7680163269bb594c4fb854222a188.dll windows x86
ac50092ecf91d1d676d83c60be3d7e36
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
DisableThreadLibraryCalls
CreateThread
GetVolumeInformationA
ExitProcess
Sleep
WriteProcessMemory
ReadProcessMemory
VirtualQuery
GetCurrentProcess
FlushInstructionCache
VirtualProtect
GetModuleHandleA
SetEnvironmentVariableA
CompareStringW
GetVersionExA
GetSystemInfo
IsProcessorFeaturePresent
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
VirtualFree
VirtualAlloc
OutputDebugStringA
WriteFile
GetLastError
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileA
CreateFileW
CloseHandle
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
LeaveCriticalSection
GetFullPathNameA
lstrcmpiA
HeapAlloc
GetProcessHeap
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLocalTime
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileAttributesA
GetTimeZoneInformation
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FatalAppExitA
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
FreeLibrary
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
HeapSize
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CompareStringA
LoadLibraryA
VirtualProtect
ExitProcess
user32
GetAsyncKeyState
keybd_event
CreateWindowExA
ShowWindow
DestroyWindow
FindWindowA
GetCursorPos
MessageBoxA
MessageBeep
gdi32
GetCharacterPlacementA
GetCharacterPlacementW
CreateCompatibleDC
CreateDIBSection
GetGlyphOutlineA
GetDeviceCaps
CreateFontA
SelectObject
SetTextColor
SetBkColor
GetTextMetricsA
GetObjectW
SetMapMode
ExtTextOutW
MoveToEx
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
DeleteDC
DeleteObject
ExtTextOutA
GetTextExtentPoint32A
SetTextAlign
GetObjectA
shell32
ShellExecuteA
d3d9
Direct3DCreate9
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
advapi32
RegQueryValueExA
RegOpenKeyA
RegCloseKey
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc1 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc2 Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ