kaib
Static task
static1
Behavioral task
behavioral1
Sample
5e2eece29d7767ce40805edb8416bce0c3fb7c77ef96196ae8ce0b04bab9628a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5e2eece29d7767ce40805edb8416bce0c3fb7c77ef96196ae8ce0b04bab9628a.dll
Resource
win10v2004-20220901-en
General
-
Target
5e2eece29d7767ce40805edb8416bce0c3fb7c77ef96196ae8ce0b04bab9628a
-
Size
73KB
-
MD5
bb097a9447ae6006a770a02ecaafcf7c
-
SHA1
60dd777f53d4c2c1e907f75c65e3b4e816af5b08
-
SHA256
5e2eece29d7767ce40805edb8416bce0c3fb7c77ef96196ae8ce0b04bab9628a
-
SHA512
459ade09c7219e96ef55986a1ca190e29e3611dd67751717cef5d8355853d9b3dd65dc5a80d08d926e135a3b6cbdb7606cfca16dcf5a1a419dbf41bfafd36831
-
SSDEEP
768:H12gmfslFQAA6zvZBtApvlZku+gFYbLWka68K3OTAbx8CzJ6BDmQL7zGiz9ICosH:/olcgULRQ8x8jDmQL7zG5WVUDoD8UL
Malware Config
Signatures
Files
-
5e2eece29d7767ce40805edb8416bce0c3fb7c77ef96196ae8ce0b04bab9628a.dll windows x86
5e99c56b1e5d8d9e262ed8e4e05df723
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetErrorMode
FindFirstFileExA
SetFileAttributesA
GetFileSize
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
GetFullPathNameA
Sleep
LocalFree
LocalAlloc
ReadFile
GetModuleHandleA
SetEndOfFile
OpenProcess
GetProcessHeap
SetUnhandledExceptionFilter
HeapAlloc
DeleteFileA
GetTempPathA
GetFileInformationByHandle
CloseHandle
GetCurrentDirectoryA
GetPrivateProfileSectionA
FindNextFileA
LoadLibraryA
GetPrivateProfileStringA
FindClose
GetTempFileNameA
CopyFileA
RemoveDirectoryA
GetProcAddress
GetLastError
FindFirstFileA
SetCurrentDirectoryA
GetFileAttributesA
WriteFile
ExpandEnvironmentStringsA
GetFileAttributesExA
GetCurrentProcess
FreeLibrary
OutputDebugStringA
SetFilePointer
CreateFileA
HeapFree
SetLastError
user32
GetNextDlgTabItem
FindWindowA
GetDlgItemTextA
CloseWindow
advapi32
OpenProcessToken
LookupPrivilegeValueA
ConvertStringSidToSidA
AdjustTokenPrivileges
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Exports
Exports
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ