ysdfzxskc
Static task
static1
Behavioral task
behavioral1
Sample
8cd999fd055d9677181e8c833a571f278fabf3f7e1385f9577ac90c0a902beff.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8cd999fd055d9677181e8c833a571f278fabf3f7e1385f9577ac90c0a902beff.dll
Resource
win10v2004-20221111-en
General
-
Target
8cd999fd055d9677181e8c833a571f278fabf3f7e1385f9577ac90c0a902beff
-
Size
139KB
-
MD5
49cf80fd293b284c986432e48e5a5d36
-
SHA1
b66a31fc5e125c06a59deeaed2c33d29c0e6f053
-
SHA256
8cd999fd055d9677181e8c833a571f278fabf3f7e1385f9577ac90c0a902beff
-
SHA512
71dc9f48d3ef117dfa3d2422692768636430637eafbd19dca1d93906c02cb2257216afd5a462829f78cb1aeef86403c4fceb5eac8baced7ed05dde422caeb3f8
-
SSDEEP
1536:flORSuJ2rz0WBB0Zb9inyKru2BKZug8LiydrVSl2m8fMHPYotLV4h5St9xckP:flORYH8ifHLiIUl23gPYotLVw5KxV
Malware Config
Signatures
Files
-
8cd999fd055d9677181e8c833a571f278fabf3f7e1385f9577ac90c0a902beff.dll windows x86
338ec2d46661ec893c100eff54c895a3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
ElfBackupEventLogFileA
EnumServiceGroupW
RegOpenKeyW
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
gdi32
SetDCBrushColor
EnumICMProfilesW
GetSystemPaletteEntries
CreateFontIndirectW
GetTextExtentPoint32W
LPtoDP
SelectObject
SetBkColor
kernel32
EnumLanguageGroupLocalesW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceCounter
SetConsoleCursorInfo
Sleep
CloseHandle
CreateFileW
FreeLibrary
FreeResource
GetModuleHandleW
GetNumberFormatW
GetStringTypeExW
LocalAlloc
LocalFree
MultiByteToWideChar
QueryDosDeviceW
SetLastError
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenW
VirtualAlloc
FormatMessageW
SetConsoleActiveScreenBuffer
lstrcmpW
LoadResource
FindResourceA
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetLocaleInfoW
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
SetConsoleCtrlHandler
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
SetEnvironmentVariableA
TerminateProcess
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentThread
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetLastError
InterlockedDecrement
ole32
CoRegisterPSClsid
oleaut32
VarBstrFromDate
VarDecFromDate
rpcrt4
NdrNsSendReceive
RpcSsEnableAllocate
NdrStubGetBuffer
user32
SendMessageW
SendDlgItemMessageW
ReleaseDC
PostQuitMessage
PostMessageW
PeekMessageW
LoadIconW
IsIconic
IsClipboardFormatAvailable
GetWindowTextLengthW
GetWindowRect
GetSystemMetrics
GetSysColorBrush
GetParent
GetFocus
SetDlgItemTextW
GetDlgItem
GetDC
GetClipboardData
GetClientRect
GetActiveWindow
EndDialog
EnableWindow
EnableMenuItem
DispatchMessageW
DialogBoxParamW
DestroyWindow
wsprintfW
ScrollWindowEx
MessageBoxW
LoadStringW
GetClipboardFormatNameW
SetFocus
SetWindowPos
TranslateMessage
SystemParametersInfoW
WinHelpW
GetDlgItemTextW
GetSysColor
Exports
Exports
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ