Static task
static1
Behavioral task
behavioral1
Sample
b4247efe73169b66fe95c8cc3d085b9646e8fbf171688fee6b69799f791e56b8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4247efe73169b66fe95c8cc3d085b9646e8fbf171688fee6b69799f791e56b8.dll
Resource
win10v2004-20221111-en
General
-
Target
b4247efe73169b66fe95c8cc3d085b9646e8fbf171688fee6b69799f791e56b8
-
Size
80KB
-
MD5
982db21479ccfeb2ed5b2a03b3f7acc8
-
SHA1
a1639bd44a02bb350b899fd438934307bcf38e3b
-
SHA256
b4247efe73169b66fe95c8cc3d085b9646e8fbf171688fee6b69799f791e56b8
-
SHA512
14d0949cdf0c1e891a56ec0e8f7b1062c658483172da539887a506df60a2b78452f79e6c7f8880663c957ac8813c90c6f140d5bcde88c55d60355ad7f79a5729
-
SSDEEP
1536:fYG7hpr5KPc+gYsTtOVLTDTfdlwaTJUeeWazI9zKYTjeZ2:fYG7cgYsTt61VJUe/azI9zKfY
Malware Config
Signatures
Files
-
b4247efe73169b66fe95c8cc3d085b9646e8fbf171688fee6b69799f791e56b8.dll windows x86
df1e0a76f02d28f99be76bce60d21d7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
storm
ord423
fog
ord10028
ord10233
ord10227
ord10023
ord10029
ord10024
ord10018
gdi32
GdiSetBatchLimit
GetStockObject
kernel32
HeapAlloc
SetLastError
TlsGetValue
GetCommandLineA
GetProcAddress
LoadLibraryA
GetLastError
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrcpynA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetACP
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
ExitProcess
GetOEMCP
GetVersion
RtlUnwind
HeapReAlloc
InterlockedIncrement
HeapSize
WideCharToMultiByte
TlsSetValue
TlsAlloc
TlsFree
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapCreate
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
VirtualFree
HeapFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetFilePointer
InterlockedDecrement
shell32
SHAppBarMessage
user32
ShowWindow
wvsprintfA
GetWindowPlacement
IsIconic
FindWindowA
AdjustWindowRectEx
GetSystemMetrics
GetDesktopWindow
GetClientRect
ChangeDisplaySettingsA
CreateWindowExA
UpdateWindow
SetFocus
ShowCursor
DestroyWindow
SetWindowPos
UnregisterClassA
MessageBoxA
LoadImageA
LoadCursorA
RegisterClassA
wsprintfA
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ