LookCrypt
Static task
static1
Behavioral task
behavioral1
Sample
65a3b4dac0bc8ba027c47c342a1ea1c94bee986f160f2bf9b673e7f8e4cf2490.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
65a3b4dac0bc8ba027c47c342a1ea1c94bee986f160f2bf9b673e7f8e4cf2490.dll
Resource
win10v2004-20220812-en
General
-
Target
65a3b4dac0bc8ba027c47c342a1ea1c94bee986f160f2bf9b673e7f8e4cf2490
-
Size
112KB
-
MD5
ba9e3a91898bdc5f0a352dd65a246857
-
SHA1
aadc7608c4262b749124006ad42d2c3682d860de
-
SHA256
65a3b4dac0bc8ba027c47c342a1ea1c94bee986f160f2bf9b673e7f8e4cf2490
-
SHA512
2bc03b3e557817a725595825863f5924f53ba11222358bc6b64c933f479a0309c1513bca15f90e5960962cdf2007de0a2211826c1440960086f6e78aced8afa3
-
SSDEEP
1536:Aa2vEE0A5oVUxVMpOliKqbK6nJ0ccYNEDIjZoWMHM6l2x7KhWAtJzy:AayE1A5XsYKJncYqrWM9kwfzy
Malware Config
Signatures
Files
-
65a3b4dac0bc8ba027c47c342a1ea1c94bee986f160f2bf9b673e7f8e4cf2490.dll windows x86
cca1c3d9e4329d363d8f2a28ab6f6089
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
InterlockedCompareExchange
FileTimeToSystemTime
GetDateFormatW
lstrlenW
GetLastError
GetCurrentProcess
CloseHandle
FormatMessageW
Sleep
FreeLibrary
InterlockedExchange
user32
WindowFromPoint
advapi32
DeregisterEventSource
OpenBackupEventLogA
Exports
Exports
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ