DLLGetDocumentation
Static task
static1
Behavioral task
behavioral1
Sample
185eca1586a0f35132521334f7fd6885080c7875e4ed78989a83f26216705c4d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
185eca1586a0f35132521334f7fd6885080c7875e4ed78989a83f26216705c4d.dll
Resource
win10v2004-20220901-en
General
-
Target
185eca1586a0f35132521334f7fd6885080c7875e4ed78989a83f26216705c4d
-
Size
512KB
-
MD5
b4d5eb7026d2266f3a3f7c90f52d3840
-
SHA1
d837eff6c19ac2d30284ac5a81741d8c97cda970
-
SHA256
185eca1586a0f35132521334f7fd6885080c7875e4ed78989a83f26216705c4d
-
SHA512
9273343c8ba34565555c99113c8a757826c069f35c6bcf27e72bad243e1347a9be70446c0fe5bfa1cb008352b758cab99a2c64b0c2b5c74a70e58c740f7ee866
-
SSDEEP
3072:NxzWZuxvRLHsda1SSIxyUpmscyFF8inrycVQfROL0Q2Q9omttCHfWAwBSIw6:zzZNRLHsdmgHEFyFFz2cCf+21mte7Iw
Malware Config
Signatures
Files
-
185eca1586a0f35132521334f7fd6885080c7875e4ed78989a83f26216705c4d.dll windows x86
8f2695fcab1ef2a8f102382add180a3b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
WriteFile
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
oleaut32
SysAllocStringLen
user32
UnregisterClassA
Exports
Exports
Sections
.text Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ