Static task
static1
Behavioral task
behavioral1
Sample
220828c8de9c25f87dc6ea2a58e62f52dd17b5644341b6236eda58b5ede5b03d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
220828c8de9c25f87dc6ea2a58e62f52dd17b5644341b6236eda58b5ede5b03d.dll
Resource
win10v2004-20221111-en
General
-
Target
220828c8de9c25f87dc6ea2a58e62f52dd17b5644341b6236eda58b5ede5b03d
-
Size
851KB
-
MD5
e72d23a98235b894fd5d0b591f39deb0
-
SHA1
25211a7c2bbca7761f634174278b4ff08e34f6f2
-
SHA256
220828c8de9c25f87dc6ea2a58e62f52dd17b5644341b6236eda58b5ede5b03d
-
SHA512
9174afa65b6bf4fa2994d4377c2640991fe7f13439e9c772dffe55f71c7612008b59074eeba79170c350398cd24484fbbc074633d1910cbd97ac04dda0b9b0b4
-
SSDEEP
24576:NXjqD0Sdn4JbV1kN4eSqX2SDzCun67zKnRxx5:NXjW0Jw4qX2Qb67UPx
Malware Config
Signatures
Files
-
220828c8de9c25f87dc6ea2a58e62f52dd17b5644341b6236eda58b5ede5b03d.dll windows x86
39738fc280c77bfa13d9c5a5114030e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleCount
GetThreadLocale
GetCommandLineA
LocalReAlloc
CreateFileA
QueryPerformanceCounter
FileTimeToSystemTime
DuplicateHandle
CompareStringA
GetCommandLineW
GetACP
TlsSetValue
GetVersionExA
SystemTimeToFileTime
GetFileSize
GetOEMCP
IsDebuggerPresent
WriteConsoleA
HeapReAlloc
GetStringTypeA
GetProcessHeap
GetModuleFileNameA
GetWindowsDirectoryA
SetEnvironmentVariableA
ReadFile
GetCurrentThreadId
VirtualQuery
SetUnhandledExceptionFilter
TerminateProcess
GlobalAlloc
LocalFileTimeToFileTime
HeapAlloc
GlobalDeleteAtom
lstrlenA
GetFileType
FreeLibrary
GetCurrentProcessId
GlobalReAlloc
GetSystemInfo
ConvertDefaultLocale
FileTimeToLocalFileTime
LocalFree
TlsAlloc
GlobalLock
GetFileTime
LCMapStringA
LocalAlloc
GetLastError
HeapFree
SetFileTime
HeapSize
HeapDestroy
VirtualFree
RtlUnwind
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemDirectoryA
GlobalFree
RaiseException
HeapCreate
GetLocaleInfoA
GetConsoleMode
GetStdHandle
GetModuleHandleA
SetErrorMode
GetCurrentThread
GetConsoleOutputCP
GetVersion
CloseHandle
GlobalFlags
lstrcmpA
GlobalHandle
GlobalUnlock
SetStdHandle
LoadLibraryExA
LoadLibraryA
GetProcAddress
TlsFree
user32
GetMenu
AdjustWindowRectEx
PostQuitMessage
SetWindowRgn
ShowScrollBar
GetWindow
GetWindowPlacement
EndPaint
GetDC
ReleaseDC
DeferWindowPos
GetCapture
SetWindowPos
ValidateRect
MessageBeep
SetActiveWindow
GetWindowDC
GetNextDlgGroupItem
SetScrollInfo
ReuseDDElParam
GetSysColor
SetForegroundWindow
GetSysColorBrush
SendDlgItemMessageA
GetActiveWindow
GetMenuCheckMarkDimensions
IsRectEmpty
CopyRect
SetParent
DestroyMenu
GetScrollInfo
GetWindowThreadProcessId
SetMenuItemBitmaps
GetTopWindow
SetCapture
FillRect
IsZoomed
ShowWindow
CheckMenuItem
RedrawWindow
GetParent
LockWindowUpdate
IsWindowEnabled
BeginPaint
SetRectEmpty
ReleaseCapture
MapDialogRect
GetDesktopWindow
GetClientRect
EnableMenuItem
MoveWindow
GetDlgItem
GetMenuItemID
SetWindowContextHelpId
SetScrollRange
GetNextDlgTabItem
TrackPopupMenu
PtInRect
UpdateWindow
InflateRect
GetScrollRange
CreatePopupMenu
GetLastActivePopup
BeginDeferWindowPos
SetMenu
SetFocus
KillTimer
GetScrollPos
EndDialog
SetScrollPos
MapWindowPoints
IntersectRect
EndDeferWindowPos
IsChild
GetSystemMenu
GetMessageTime
ShowOwnedPopups
EqualRect
GetFocus
InvalidateRect
GetSystemMetrics
IsWindow
ScreenToClient
GetWindowRect
OffsetRect
TranslateMessage
UnpackDDElParam
GetMenuItemCount
gdi32
CreateBitmap
PatBlt
Escape
OffsetViewportOrgEx
GetDeviceCaps
SetWindowExtEx
ExcludeClipRect
StretchDIBits
GetMapMode
SetViewportOrgEx
GetClipBox
DeleteDC
CreateCompatibleDC
SelectObject
OffsetRgn
SelectClipRgn
CreateCompatibleBitmap
CreatePatternBrush
DeleteObject
RectVisible
SaveDC
GetStockObject
GetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetBkMode
ExtSelectClipRgn
CreateRectRgn
IntersectClipRect
CreateRectRgnIndirect
ScaleWindowExtEx
RestoreDC
CreateSolidBrush
BitBlt
GetPixel
PtVisible
DPtoLP
Ellipse
SetRectRgn
GetRgnBox
GetTextColor
ole32
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CLSIDFromProgID
CoGetClassObject
OleUninitialize
CoRevokeClassObject
OleInitialize
CLSIDFromString
OleIsCurrentClipboard
OleFlushClipboard
oleaut32
VariantTimeToSystemTime
OleCreateFontIndirect
SafeArrayDestroy
VariantInit
SysAllocStringLen
SystemTimeToVariantTime
SysStringLen
SysFreeString
VariantClear
VariantCopy
VariantChangeType
msvcrt
strtoul
tanh
_wrmdir
_get_osfhandle
_read
_filbuf
ldexp
_telli64
_stricmp
strchr
free
calloc
exit
_wcsnicmp
pow
tan
fputc
_open
_wsetlocale
fsetpos
_assert
_wfopen
_waccess
setvbuf
towlower
_wtoi
atof
_filelengthi64
_endthreadex
wcslen
__set_app_type
acos
strftime
fmod
wcscat
clock
strlen
ftell
strncpy
_wrename
wcsxfrm
_close
difftime
sscanf
atexit
strcat
rand
_wgetenv
_beginthreadex
_lseeki64
ctime
cos
_open_osfhandle
memset
memcpy
puts
_isctype
strncat
_wmkdir
__p__fmode
sprintf
strtod
bsearch
memchr
_wstati64
_flsbuf
wcsspn
_wopen
fputws
swscanf
wcsncpy
atan
localtime
__mb_cur_max
_setjmp
abort
realloc
__p__environ
wcstod
_stati64
floor
log
_getcwd
_cexit
strncmp
exp
atan2
_pctype
getwc
modf
sin
_iob
cosh
putwc
mktime
wcstol
toupper
wcscoll
_wcsicmp
wcsftime
wcscmp
fgetc
fputs
__getmainargs
fread
srand
strcpy
time
iswctype
log10
strtol
strcoll
fprintf
qsort
frexp
sinh
towupper
strstr
_wcsdup
_wremove
fputwc
signal
setlocale
_onexit
fclose
_errno
swprintf
ceil
_fstati64
_setmode
ungetwc
wcsncmp
wcstoul
atoi
fgets
fseek
mbstowcs
ungetc
wcschr
fgetpos
tolower
asin
malloc
strcmp
_wtol
fflush
strxfrm
longjmp
getenv
memmove
wcspbrk
wcscpy
clearerr
_write
fwrite
wcsstr
fopen
gmtime
sqrt
_fdopen
_commit
_strnicmp
strrchr
_CIacos
Sections
.text Size: 658KB - Virtual size: 657KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ