Static task
static1
Behavioral task
behavioral1
Sample
15011efcdf40e2c80d4c09cae0bc3fa8f60303e1531bf9c9f5097cda6dd014d8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
15011efcdf40e2c80d4c09cae0bc3fa8f60303e1531bf9c9f5097cda6dd014d8.dll
Resource
win10v2004-20221111-en
General
-
Target
15011efcdf40e2c80d4c09cae0bc3fa8f60303e1531bf9c9f5097cda6dd014d8
-
Size
93KB
-
MD5
4956f5279f589d9d21aee6d1eeef2cc0
-
SHA1
ef80b2175c1f38a1c1284566023c555f204ebb31
-
SHA256
15011efcdf40e2c80d4c09cae0bc3fa8f60303e1531bf9c9f5097cda6dd014d8
-
SHA512
0fc722933c4d6b85ee44b30b47863801e1c353f24e111b3e7b835e657c5911462b2e57e6298a8040ef22be881b573bfe4a99d5f79cfd6df0bcf0cf909040b7c3
-
SSDEEP
1536:qa3I3AzWHWUYe3wgKh6/69QR4WboU0YT5FPsBDGW2gzfLKV0fvlUkDoyn7u6ysQu:qII3FHW9e3HQ6/6CRg8FwSWDrGwlU+Tw
Malware Config
Signatures
Files
-
15011efcdf40e2c80d4c09cae0bc3fa8f60303e1531bf9c9f5097cda6dd014d8.dll windows x86
4f1ec3efb20f5026a23dd7efab48dd2b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
GetModuleFileNameA
GetModuleFileNameW
CreateFileA
GetProcAddress
CreateDirectoryA
CreateDirectoryW
LCMapStringA
LCMapStringW
GetFileAttributesA
GetFileAttributesW
LocalFree
LocalAlloc
FormatMessageA
InterlockedExchange
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedDecrement
InterlockedIncrement
LoadLibraryExA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
FindClose
SizeofResource
LoadResource
LockResource
WriteFile
CloseHandle
DisableThreadLibraryCalls
GetVersionExA
FreeLibrary
CreateThread
lstrcpyW
FindResourceW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetModuleHandleA
InterlockedCompareExchange
CompareStringW
VirtualProtect
lstrlenW
GetCommandLineA
user32
GetMenuItemID
SetCapture
InvalidateRect
GetSystemMetrics
SetCursor
MapWindowPoints
ScreenToClient
GetWindowRect
TrackPopupMenu
EnableMenuItem
IsIconic
IsWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetClientRect
GetFocus
GetSubMenu
DestroyMenu
GetMenuItemCount
CreatePopupMenu
CheckMenuRadioItem
LoadMenuW
LoadMenuA
SetDlgItemTextW
SetDlgItemTextA
DefWindowProcW
DefWindowProcA
PostMessageW
GetWindowLongW
GetWindowLongA
SetWindowLongW
GetMenuItemInfoW
GetMenuItemInfoA
InsertMenuW
InsertMenuA
SendMessageW
SendMessageA
OpenInputDesktop
CloseDesktop
GetParent
DestroyIcon
GetDlgItemInt
SetDlgItemInt
GetDlgItem
GetDC
ReleaseDC
ShowWindow
MessageBeep
DeleteMenu
GetMenuState
GetDesktopWindow
SetFocus
CreateMenu
CreateWindowExA
CreateWindowExW
LoadImageA
LoadImageW
LoadIconA
LoadIconW
MessageBoxA
MessageBoxW
LoadStringW
LoadStringA
SendDlgItemMessageW
LoadCursorW
LoadCursorA
ReleaseCapture
advapi32
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RevertToSelf
RegOpenKeyExA
RegCloseKey
gdi32
GetTextExtentPointW
ole32
RegisterDragDrop
msvcrt
_adjust_fdiv
malloc
_initterm
free
_amsg_exit
_XcptFilter
_except_handler3
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ