NSGetModule
Static task
static1
Behavioral task
behavioral1
Sample
8ca15d0c460b903fe4b26b27ff3ed893204930adeb7f6d9db4aa8cccbe71f7a9.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8ca15d0c460b903fe4b26b27ff3ed893204930adeb7f6d9db4aa8cccbe71f7a9.dll
Resource
win10v2004-20220812-en
General
-
Target
8ca15d0c460b903fe4b26b27ff3ed893204930adeb7f6d9db4aa8cccbe71f7a9
-
Size
660KB
-
MD5
70aea12fcf87b180bad17dd49064527f
-
SHA1
8f9bf1c8e97e76130a4a4b02370ed7e830c013eb
-
SHA256
8ca15d0c460b903fe4b26b27ff3ed893204930adeb7f6d9db4aa8cccbe71f7a9
-
SHA512
4010d2f327c329977d5ea26a548a398e14fc8860f6cf1de8e26aef0cd10359aec00e66d0848b145b000139fdd594ebfc2aca74fae86952cf619f5b62ab67c9b9
-
SSDEEP
12288:YAJ4uqF84pVkL+JnoqkxFxToQ7fqtKyA7QSjhzQTNKjKEoo:YLU4ps+1oDxToQ7CtKyrSjh8TNK2R
Malware Config
Signatures
Files
-
8ca15d0c460b903fe4b26b27ff3ed893204930adeb7f6d9db4aa8cccbe71f7a9.dll windows x86
e58e28b749d93e06a8b90ece4a1eb4e4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
xpcom
NS_CStringContainerInit
NS_StringContainerInit2
NS_Free
NS_StringContainerInit
NS_CStringContainerFinish
NS_StringContainerFinish
NS_StringGetData
NS_Alloc
NS_GetServiceManager
NS_GetComponentManager
NS_CStringGetData
NS_CStringSetData
nspr4
PR_AtomicDecrement
PR_AtomicIncrement
kernel32
WriteFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
CreateFileA
GetProcessHeap
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
CreateFileW
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
MultiByteToWideChar
GetFullPathNameW
FreeLibrary
Sleep
GetSystemInfo
GetSystemTime
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapAlloc
InterlockedCompareExchange
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
CloseHandle
user32
CallWindowProcW
SendMessageW
ShowWindow
PostMessageW
IsWindow
SetWindowTextW
GetWindowLongW
GetWindowRect
SystemParametersInfoW
SetWindowLongW
SetWindowPos
FindWindowExW
wsprintfW
GetWindowTextW
ws2_32
inet_addr
shlwapi
PathMatchSpecW
UrlGetPartW
StrStrIW
UrlEscapeW
UrlUnescapeW
PathFileExistsW
PathIsDirectoryW
shell32
SHCreateDirectoryExW
ole32
CoInitialize
CoTaskMemFree
CoCreateGuid
CoUninitialize
Exports
Exports
Sections
.text Size: 514KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ