Static task
static1
Behavioral task
behavioral1
Sample
830cac592647a34ca2db6a16576331df6bfc29f41f9b07554869d6a96fa1fa09.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
830cac592647a34ca2db6a16576331df6bfc29f41f9b07554869d6a96fa1fa09.dll
Resource
win10v2004-20220812-en
General
-
Target
830cac592647a34ca2db6a16576331df6bfc29f41f9b07554869d6a96fa1fa09
-
Size
130KB
-
MD5
dc6ce8c3023427287034ceafc551047d
-
SHA1
8e32832472209beada9a27b45ae3ab83568ffadf
-
SHA256
830cac592647a34ca2db6a16576331df6bfc29f41f9b07554869d6a96fa1fa09
-
SHA512
0df02d822112305e3dc63bb6769ea87d19592079012fdb53bf6a383d668ca64264067ddcb2cce5fd5bd69b5da4323f475ad0331f0ebb34ab52c3f6aaf7db4ad6
-
SSDEEP
3072:lmwTfs863rWPbLqtmIAXTEXpqo55NaY9cviesJPwiM4yUW:lmCs863gLqtm9TEXpx55NaYcAwiV
Malware Config
Signatures
Files
-
830cac592647a34ca2db6a16576331df6bfc29f41f9b07554869d6a96fa1fa09.dll windows x86
bc527644a8f0d4ea358ec273a400ce79
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
lstrcpynW
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryExW
lstrcmpiW
FindResourceW
LoadResource
SizeofResource
lstrlenA
EnterCriticalSection
LeaveCriticalSection
lstrcmpW
GlobalUnlock
GlobalHandle
GlobalFree
InterlockedIncrement
CloseHandle
SetThreadPriority
GetCurrentThread
InterlockedExchange
FindResourceExW
LockResource
GetBinaryTypeW
GetModuleHandleW
GetStringTypeExW
CompareStringW
GetModuleFileNameW
GetProcessHeap
Sleep
CreateTimerQueue
GetModuleHandleA
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSection
lstrcpyW
lstrcatW
LoadLibraryW
GetProcAddress
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
FreeLibrary
SetUnhandledExceptionFilter
MulDiv
GetCurrentDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetLastError
LocalFree
SetCurrentDirectoryW
lstrlenW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
OutputDebugStringW
SetLastError
IsBadWritePtr
GetVersion
GetSystemDefaultLangID
VirtualProtect
user32
LoadMenuW
DestroyIcon
GetSystemMetrics
RemoveMenu
GetClassInfoExW
RegisterClassExW
TrackPopupMenu
DialogBoxIndirectParamW
LoadMenuIndirectW
LoadImageW
UpdateWindow
IsWindow
DrawTextW
GetSysColor
ReleaseDC
GetDC
LoadCursorW
DestroyWindow
FillRect
EndPaint
DestroyMenu
ClientToScreen
SetMenuDefaultItem
EnableMenuItem
DefWindowProcW
GetClientRect
DefDlgProcW
DefMDIChildProcW
DefFrameProcW
InflateRect
SendMessageW
InvalidateRect
SetWindowPos
SetCaretPos
GetWindowLongW
SetFocus
PostMessageW
GetParent
DrawIconEx
GetKeyState
GetSubMenu
WinHelpW
SetWindowTextW
CreateWindowExW
ShowWindow
ScreenToClient
MoveWindow
EnableWindow
GetCursorPos
GetWindowRect
PtInRect
SetWindowLongW
SystemParametersInfoW
wsprintfW
LoadStringW
CharNextW
advapi32
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueExW
gdi32
GetStockObject
SelectObject
SetTextColor
SetBkColor
CreateBitmap
DeleteObject
CreateBrushIndirect
CreatePenIndirect
CreateEnhMetaFileW
GetDeviceCaps
LPtoDP
DeleteDC
BitBlt
LineTo
MoveToEx
CreatePen
CreateCompatibleDC
CreatePatternBrush
CreateDIBSection
ole32
PropVariantClear
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CreateBindCtx
CLSIDFromString
CoCreateInstance
msvcrt
time
_except_handler3
_XcptFilter
_msize
__CxxFrameHandler
ceil
_CxxThrowException
_wtoi
_itow
_initterm
_vsnwprintf
_wcsupr
wcsstr
memset
_hypot
_CIlog
wcschr
calloc
qsort
malloc
free
_amsg_exit
_adjust_fdiv
localtime
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ