_�����ӳ���
Static task
static1
Behavioral task
behavioral1
Sample
aacdae5689eda5f82c91ec5351c08204bd7444191828a330d7c27c6804a917b5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aacdae5689eda5f82c91ec5351c08204bd7444191828a330d7c27c6804a917b5.dll
Resource
win10v2004-20220812-en
General
-
Target
aacdae5689eda5f82c91ec5351c08204bd7444191828a330d7c27c6804a917b5
-
Size
80KB
-
MD5
df0062568b95b711fa02667fa8eb58d0
-
SHA1
d92acd2304be99e7431a18378c74c8877a22b2c0
-
SHA256
aacdae5689eda5f82c91ec5351c08204bd7444191828a330d7c27c6804a917b5
-
SHA512
340077fa3de78958eb48cb05723bb6675cf6eb805e27b7c45a9148fd2edf5616e31f2a1150e334ea360bf14188480723903fbe7a7fcc244ddedfbc1d278b7928
-
SSDEEP
1536:H4MQarP/TYkU6/hAtwXYIXRJ8Ld2e4inC0A:H40P5nhAtwvRJSd2eXnCh
Malware Config
Signatures
Files
-
aacdae5689eda5f82c91ec5351c08204bd7444191828a330d7c27c6804a917b5.dll windows x86
ef7af668cb729b39e5f47f7737d290d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeSetEvent
kernel32
DeleteCriticalSection
lstrcpyn
GetModuleHandleA
GetProcAddress
GetCurrentThread
Beep
RtlMoveMemory
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
GetTickCount
FreeLibrary
LoadLibraryA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
RtlUnwind
LCMapStringA
LCMapStringW
InterlockedDecrement
InterlockedIncrement
user32
wsprintfA
MessageBoxA
PostMessageA
GetForegroundWindow
CallWindowProcA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ