Static task
static1
Behavioral task
behavioral1
Sample
37fd9bec7b14696f0fadde1eebfe4fc46a59f4c7e3fefd0058d82d814efce070.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
37fd9bec7b14696f0fadde1eebfe4fc46a59f4c7e3fefd0058d82d814efce070.dll
Resource
win10v2004-20221111-en
General
-
Target
37fd9bec7b14696f0fadde1eebfe4fc46a59f4c7e3fefd0058d82d814efce070
-
Size
86KB
-
MD5
d8ac4da472c4ab332930cb71192e3aa0
-
SHA1
9b9ce511027cf567e10f61b3d7b2c1a2fc6d9b61
-
SHA256
37fd9bec7b14696f0fadde1eebfe4fc46a59f4c7e3fefd0058d82d814efce070
-
SHA512
bdcfcb016c4ab8d0d0bc157ed950e9113e1beb31eb5a1c4f211ed297d7ecae7ce0cb90ab6164a6602260d3f4ee6c2f209b305e2204b4833c8bf8a370cad7e69d
-
SSDEEP
1536:EXRf51YeqfOJHyTEPqIcCJq7LLtXA+ZpgCiIQMOxpxIWi:IvYDfOpyQP9058MqpxIW
Malware Config
Signatures
Files
-
37fd9bec7b14696f0fadde1eebfe4fc46a59f4c7e3fefd0058d82d814efce070.dll windows x86
d6e59f27f85a5216667b021b9e7b09da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
lstrcpyA
CompareStringA
GetTickCount
lstrcatA
EnterCriticalSection
lstrlenA
lstrcmpiA
SetLastError
GetLastError
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
LocalFree
GetLocaleInfoW
HeapFree
HeapSize
GetProcessHeap
HeapValidate
lstrlenW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
lstrcmpA
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
FormatMessageW
CloseHandle
DeviceIoControl
QueueUserWorkItem
HeapAlloc
DeleteCriticalSection
CreateEventW
InitializeCriticalSection
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
WriteFile
ReadFile
BindIoCompletionCallback
CreateFileA
DeleteTimerQueueEx
ChangeTimerQueueTimer
InterlockedExchange
Sleep
InterlockedCompareExchange
GetModuleFileNameW
SetEvent
GetCommandLineA
GlobalFree
VirtualProtect
GetCurrentProcessId
GlobalAlloc
user32
CharNextW
LoadStringW
advapi32
RegEnumValueA
RegCloseKey
TraceMessage
RegOpenKeyExA
ole32
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
rpcrt4
RpcStringFreeW
UuidToStringW
I_RpcFree
I_RpcAllocate
msvcr71
_iob
__dllonexit
__CppXcptFilter
_initterm
_amsg_exit
_CxxThrowException
free
wcslen
towupper
memmove
malloc
_except_handler3
_ui64tow
_ultow
_onexit
_memicmp
memset
_adjust_fdiv
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ