Static task
static1
Behavioral task
behavioral1
Sample
26aaa3dfe29ba3d0f5323789fedca5d3e57340004485a3250f31afa4dc68033b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26aaa3dfe29ba3d0f5323789fedca5d3e57340004485a3250f31afa4dc68033b.dll
Resource
win10v2004-20220812-en
General
-
Target
26aaa3dfe29ba3d0f5323789fedca5d3e57340004485a3250f31afa4dc68033b
-
Size
136KB
-
MD5
fff8fc92d9dbc32aa3c8afac2bb32310
-
SHA1
a8f48be8df960a7e6b574cb802f36de4f47cf380
-
SHA256
26aaa3dfe29ba3d0f5323789fedca5d3e57340004485a3250f31afa4dc68033b
-
SHA512
034288bb0f4e66d45f0b7c1a5ae1038a2274602489e38d440dcee4fa19f96766fadfba722c0d796f360f28cf7d0962ab9d80e6170cd8f34cc4e58dbffa6ed7a2
-
SSDEEP
3072:Pl3ViIJVy9r+Nxp/orVjS94j6Ln3wgOVg/9Iq3:zzbLtoRS9260tVg/9I
Malware Config
Signatures
Files
-
26aaa3dfe29ba3d0f5323789fedca5d3e57340004485a3250f31afa4dc68033b.dll windows x86
dcc54af39514cde2920ec8edae4dbb61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
DisableThreadLibraryCalls
GetVersionExA
GlobalAlloc
LocalFileTimeToFileTime
FormatMessageW
FormatMessageA
GetSystemTimeAsFileTime
CreateEventW
GetTickCount
GlobalFree
FindNextFileW
GlobalLock
GlobalUnlock
CreateThread
DeleteFileW
CreateFileW
SetFileTime
CloseHandle
GetCurrentThreadId
FindFirstFileW
FindClose
lstrcmpiA
lstrcmpA
lstrcpynW
LocalFree
GetProcAddress
lstrlenA
FreeLibrary
lstrcpynA
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
SystemTimeToFileTime
GetFullPathNameW
FreeResource
ReleaseMutex
GetSystemDirectoryW
WriteFile
LCMapStringW
GetProcessHeap
HeapReAlloc
SetLastError
WideCharToMultiByte
IsBadReadPtr
GetFileTime
lstrcpyW
lstrcatW
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
GetCommandLineA
VirtualProtect
VirtualFree
CompareFileTime
VirtualAlloc
user32
GetClipboardFormatNameW
CharNextW
GetWindowTextW
SendMessageW
ShowWindow
SetWindowTextW
EnableWindow
LoadStringW
MessageBoxW
UpdateWindow
GetClientRect
LoadStringA
SetCursor
GetDlgItem
CharNextA
InflateRect
advapi32
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegSetValueExA
RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
FreeSid
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
ReleaseStgMedium
CreateStreamOnHGlobal
GetHGlobalFromStream
StringFromCLSID
CLSIDFromString
msvcr71
wcschr
wcsncpy
sscanf
_vsnwprintf
wcslen
wcscpy
_wcsicmp
_wtoi64
__CxxFrameHandler
realloc
memcpy
_initterm
__CppXcptFilter
_onexit
__dllonexit
_wtol
wcstok
wcstoul
wcscmp
time
localtime
asctime
fprintf
vfprintf
strrchr
_CxxThrowException
malloc
_except_handler3
_adjust_fdiv
_amsg_exit
free
_XcptFilter
memset
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ