?ThreadA@@YGXK@Z
Static task
static1
Behavioral task
behavioral1
Sample
1369a42e821f2232263265c7c637a104bbebbd41c5a4c7d3c8c46e4dc6902a38.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1369a42e821f2232263265c7c637a104bbebbd41c5a4c7d3c8c46e4dc6902a38.dll
Resource
win10v2004-20220812-en
General
-
Target
1369a42e821f2232263265c7c637a104bbebbd41c5a4c7d3c8c46e4dc6902a38
-
Size
147KB
-
MD5
8ddbbab2b3da6138d6dc44c62d155bf0
-
SHA1
ff92e428437466ebd59ec36a3f539def5fbd93d3
-
SHA256
1369a42e821f2232263265c7c637a104bbebbd41c5a4c7d3c8c46e4dc6902a38
-
SHA512
d9a0b0863b6b7cf8403a776946e472dc2a1d75fbe03f3b805db6847939c05c212109a4493cfb33b301a82f5414150f7ee4f752e4441ab871c6f2afa3d88b7a8b
-
SSDEEP
3072:ddkWBI/iHXB8VNIU+2M8s8a0hEyq9LkUGwi1GZcHBbomVrPcX0O:ddpBI/I5UfM83Rwi1GSHCir80
Malware Config
Signatures
Files
-
1369a42e821f2232263265c7c637a104bbebbd41c5a4c7d3c8c46e4dc6902a38.dll windows x86
9d5fe57300217b473b89040c02c04507
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathGetArgsW
kernel32
GetWindowsDirectoryA
SetCurrentDirectoryW
GetFileTime
GetProcAddress
FoldStringW
OpenEventA
GetCurrentDirectoryW
CreateNamedPipeA
GlobalAddAtomA
GetFullPathNameA
CancelWaitableTimer
VerifyVersionInfoW
GetOEMCP
GetVersionExW
QueryDosDeviceW
GlobalDeleteAtom
GetTickCount
HeapLock
EscapeCommFunction
GlobalGetAtomNameA
GetAtomNameA
LockFile
CreateFileMappingA
GetAtomNameW
HeapUnlock
FindResourceExW
LeaveCriticalSection
GetOverlappedResult
MoveFileW
CreateSemaphoreA
GetCommandLineA
CreateEventW
SetupComm
OpenFileMappingW
CreateSemaphoreW
TryEnterCriticalSection
GetModuleFileNameA
IsDBCSLeadByte
GlobalMemoryStatusEx
GetLocaleInfoA
SetThreadAffinityMask
OpenFileMappingA
FileTimeToDosDateTime
OpenSemaphoreW
lstrcatW
SleepEx
GetCommConfig
GetShortPathNameA
GetCommandLineW
GetTimeFormatW
GetModuleFileNameW
HeapWalk
FindNextFileA
GetThreadTimes
TerminateThread
GetFileAttributesExW
LocalReAlloc
SetWaitableTimer
GetTempPathA
LoadLibraryExW
EnumSystemLocalesA
LoadResource
HeapSize
ReleaseSemaphore
GetSystemTime
GlobalCompact
SetFileApisToOEM
GetFileAttributesW
SetTimerQueueTimer
GetThreadContext
ResetEvent
GlobalSize
CompareFileTime
IsDBCSLeadByteEx
GetFileAttributesA
GetSystemInfo
FindClose
CreateFileA
GetComputerNameA
GetUserDefaultUILanguage
GetStartupInfoW
DuplicateHandle
SetSystemTime
GetSystemDefaultUILanguage
CallNamedPipeW
GetHandleInformation
CompareStringW
FileTimeToLocalFileTime
CompareStringA
GetTempFileNameW
CopyFileW
GetFileType
DisconnectNamedPipe
GetNumberFormatA
UnhandledExceptionFilter
CreateDirectoryA
GetSystemDirectoryA
SetCurrentDirectoryA
ConvertDefaultLocale
SetErrorMode
DeleteAtom
GlobalUnlock
ExitThread
EnterCriticalSection
SetNamedPipeHandleState
LocalAlloc
GetBinaryTypeW
CreatePipe
SystemTimeToFileTime
FindResourceA
DeleteCriticalSection
FlushFileBuffers
GetWindowsDirectoryW
ClearCommError
LCMapStringW
FormatMessageW
GetSystemTimeAdjustment
GlobalReAlloc
AddAtomA
GetModuleHandleW
MapViewOfFile
CancelIo
OpenEventW
GlobalAddAtomW
LockResource
WaitForSingleObjectEx
GetLastError
FindFirstFileA
EnumResourceTypesA
MoveFileExA
lstrcmpA
FindNextChangeNotification
GetFileAttributesExA
GetCommModemStatus
FlushViewOfFile
GetSystemWindowsDirectoryW
GetPriorityClass
SetCommMask
MoveFileExW
GetCPInfo
SetLocalTime
lstrcpyA
CreateMailslotW
RegisterWaitForSingleObject
CloseHandle
GlobalGetAtomNameW
RemoveDirectoryW
WaitForMultipleObjectsEx
SetCommState
SuspendThread
GetCommProperties
GetUserDefaultLangID
GlobalFindAtomW
GlobalAlloc
TransactNamedPipe
GetCurrentThreadId
GetACP
CreateMutexA
RaiseException
GlobalFlags
CreateWaitableTimerW
HeapReAlloc
user32
IsCharUpperW
InvalidateRgn
Exports
Exports
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ