Static task
static1
Behavioral task
behavioral1
Sample
fc6857bc6f0305bc564d230d38b93895b9aea30ef481919177235801fad9a37d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fc6857bc6f0305bc564d230d38b93895b9aea30ef481919177235801fad9a37d.dll
Resource
win10v2004-20220812-en
General
-
Target
fc6857bc6f0305bc564d230d38b93895b9aea30ef481919177235801fad9a37d
-
Size
80KB
-
MD5
756ebed39631a3400c8a1777aa47253d
-
SHA1
7d6e2e0b634d2f2425cb5df57958c6554730b2a7
-
SHA256
fc6857bc6f0305bc564d230d38b93895b9aea30ef481919177235801fad9a37d
-
SHA512
f72e5ae1b994c20cbe4a17c7a2a9b67d1ae1653e8251bcbb281e405faaee826902766d2d3e256dfe8215c22632f13b052d6ae03e5b73f85e20953f457e4f2e2d
-
SSDEEP
1536:Fdmc6ge8S0/gpbue8UaYx6dmj8oGA4v5DsKpWB3V9WB58D4ofmcxTIJ0+aFWgIIC:Fcc6yLe8F06YI0y4KpWRPWB588oucxTQ
Malware Config
Signatures
Files
-
fc6857bc6f0305bc564d230d38b93895b9aea30ef481919177235801fad9a37d.dll windows x86
9f04bdf899f8cb47a7dfa8a352d2d44b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
CompareStringW
GetCurrentProcess
InterlockedCompareExchange
Sleep
SetErrorMode
CloseHandle
DeviceIoControl
CreateFileW
DisableThreadLibraryCalls
lstrcmpiW
lstrcpyW
lstrcpynW
HeapAlloc
HeapFree
GetLastError
lstrlenW
GetProcessHeap
lstrcmpW
GetModuleHandleA
GetProcAddress
GetFileAttributesW
GetVersion
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetLastError
SetEvent
GetModuleHandleW
TerminateProcess
InterlockedExchange
SetUnhandledExceptionFilter
GetTickCount
GetCommandLineA
GetSystemTime
VirtualProtect
user32
TranslateMessage
DispatchMessageW
DefWindowProcW
LoadIconW
GetMessageW
LoadStringW
PostQuitMessage
CreateWindowExW
CharPrevW
CharNextW
GetParent
PostMessageW
RegisterClassExW
KillTimer
advapi32
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryInfoKeyW
DeregisterEventSource
RegCloseKey
RegQueryValueExW
ole32
CoTaskMemFree
StringFromGUID2
IIDFromString
CoInitialize
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoUninitialize
msvcrt
free
malloc
_initterm
_CxxThrowException
memcpy
_wtoi
_adjust_fdiv
_wcsicmp
_wcsupr
_amsg_exit
memset
_vsnwprintf
__CxxFrameHandler
_except_handler3
exit
_XcptFilter
_cexit
msvcp60
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ