Static task
static1
Behavioral task
behavioral1
Sample
869b5c86489ac1e9a373535149691b121d7994f0a047a41723e161c9656f1a14.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
869b5c86489ac1e9a373535149691b121d7994f0a047a41723e161c9656f1a14.dll
Resource
win10v2004-20220812-en
General
-
Target
869b5c86489ac1e9a373535149691b121d7994f0a047a41723e161c9656f1a14
-
Size
100KB
-
MD5
9b91edde0b89842c0e6fc0ec69b8ef36
-
SHA1
bee3a30cbdea89b88727f82968d2c42f48883533
-
SHA256
869b5c86489ac1e9a373535149691b121d7994f0a047a41723e161c9656f1a14
-
SHA512
c57b347e1dc02d2faf4e1d3a450e3c04aa0d4fbcaa6fccb379b2204743b9597d2449b552c2ee3e7cdf8327d06da5a15273b00214227e7365c3bd21014fb21a98
-
SSDEEP
3072:ol7Vt2ChrKgCWf3Itf3HVsMBCxn5R8ZEXz:QUErssI1VLBCp5cE
Malware Config
Signatures
Files
-
869b5c86489ac1e9a373535149691b121d7994f0a047a41723e161c9656f1a14.dll windows x86
dd6fc235a66e72f4ba38f205c3852735
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LocalAlloc
LocalFree
lstrlenW
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
InterlockedExchange
SetLastError
CompareFileTime
lstrcmpW
LeaveCriticalSection
CloseHandle
GetCurrentThread
EnterCriticalSection
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiW
InterlockedDecrement
Sleep
InterlockedCompareExchange
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetSystemDirectoryA
GetLastError
FormatMessageA
GetModuleHandleA
FreeLibrary
VirtualProtect
MultiByteToWideChar
DeleteFileA
GetVersion
GetCommandLineA
WideCharToMultiByte
user32
EnableWindow
ShowWindow
SendMessageW
MessageBoxW
LoadStringW
DestroyWindow
UpdateWindow
CreateDialogParamW
EndDialog
GetWindowTextW
GetWindowTextLengthW
DialogBoxParamW
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegisterEventSourceW
ReportEventW
RegCreateKeyExW
RegConnectRegistryW
CryptAcquireContextW
CryptReleaseContext
GetTokenInformation
OpenThreadToken
RevertToSelf
CryptGetProvParam
CryptDestroyKey
RegEnumKeyExW
DeregisterEventSource
ole32
CoGetClassObject
CoTaskMemAlloc
rpcrt4
UuidFromStringW
msvcrt
_fsopen
swprintf
_wtol
wcscpy
wcscmp
_wcsicmp
wcschr
_wcslwr
wcscat
iswspace
wcsncmp
_ltow
wcslen
wcsncat
wcsncpy
_XcptFilter
localtime
time
_except_handler3
fgets
exit
fputs
_cexit
_ismbblead
_acmdln
_initterm
_amsg_exit
memset
getenv
strerror
fopen
_errno
fclose
malloc
free
_vsnprintf
_vsnwprintf
_adjust_fdiv
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ