Static task
static1
Behavioral task
behavioral1
Sample
3cb86f24fd6ff271b3740b697e1683757a165f9c9f4b97fe30d339d702e25e0d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3cb86f24fd6ff271b3740b697e1683757a165f9c9f4b97fe30d339d702e25e0d.dll
Resource
win10v2004-20221111-en
General
-
Target
3cb86f24fd6ff271b3740b697e1683757a165f9c9f4b97fe30d339d702e25e0d
-
Size
62KB
-
MD5
dedcb8c6ab8cfc04ba240ee1df3ee3f0
-
SHA1
ea3a98d8efdb3a4050d61dfc603150d647755f99
-
SHA256
3cb86f24fd6ff271b3740b697e1683757a165f9c9f4b97fe30d339d702e25e0d
-
SHA512
436b822abf5975324ad49134f2baa7f6b0abb850aae4077a4bae7056855d531e84a3ea3424726334815d36293475ab3829c287e61ec9175fecd3b8b67686c402
-
SSDEEP
768:4ytpVVxvbTWz6TGWy7NbEvcskTQ6QskTQ6F:prFvWCnyPssQtssQ
Malware Config
Signatures
Files
-
3cb86f24fd6ff271b3740b697e1683757a165f9c9f4b97fe30d339d702e25e0d.dll windows x86
94fa8538866b1c2e00dc483fdd40bc90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetStartupInfoA
GetModuleHandleW
VirtualAlloc
GetCommandLineA
lstrlenW
GetCommandLineW
HeapAlloc
HeapFree
GetProcessHeap
GetProcAddress
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetVersionExW
GetLocaleInfoW
CreateFileMappingW
LoadLibraryExW
FindResourceExW
LoadResource
SetLastError
CreateFileW
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileIntW
GetPrivateProfileIntA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetFullPathNameW
GetFullPathNameA
GetLocaleInfoA
LoadLibraryExA
GetUserDefaultLCID
LoadLibraryW
GetUserDefaultLangID
HeapReAlloc
GetStdHandle
GetConsoleMode
GetSystemDirectoryA
GetTempPathA
GetTempFileNameA
WriteFile
FlushFileBuffers
GetCPInfo
GetFileAttributesW
FindFirstFileW
GetFileAttributesA
FindFirstFileA
FindClose
GetACP
CreateEventA
CreateThread
CloseHandle
SetEvent
FormatMessageW
LocalAlloc
LocalFree
FormatMessageA
GetVersionExA
GetModuleFileNameW
LoadLibraryA
FreeLibrary
lstrlenA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
OutputDebugStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
InterlockedDecrement
ExitProcess
GetModuleHandleA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
user32
LoadCursorA
LoadCursorW
advapi32
RegOpenKeyW
Sections
ggg2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata5 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ