_�����ӳ���
Behavioral task
behavioral1
Sample
7babccbfce191fb163ace311753fd4a764410305e179bcfe86dcd445fb5bf0a4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7babccbfce191fb163ace311753fd4a764410305e179bcfe86dcd445fb5bf0a4.dll
Resource
win10v2004-20220812-en
General
-
Target
7babccbfce191fb163ace311753fd4a764410305e179bcfe86dcd445fb5bf0a4
-
Size
746KB
-
MD5
86548628c27cc45d992f37a82724dc30
-
SHA1
65846c7fc566dd578b490fe65d8b6a8e3913af59
-
SHA256
7babccbfce191fb163ace311753fd4a764410305e179bcfe86dcd445fb5bf0a4
-
SHA512
91c8b60e08a25aabce61b4a7aadade97fba98236b3ef655f4e39df868251100d15a5a7b3b6acac97ba1a6ae9f9fefb2b5e396f372b315aa0d0426c2649120249
-
SSDEEP
12288:ChUdRtDcXXD5to7dHFNiT2iib46eScH9cOK5/zxnFjel6INkM4ZwZets4i:CqTtitt+xFcT2isQqZ5HjE6If4ZwUts
Malware Config
Signatures
Files
-
7babccbfce191fb163ace311753fd4a764410305e179bcfe86dcd445fb5bf0a4.dll windows x86
23cde79e9b3af507d45656636095ec46
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Beep
GetCurrentProcess
CreateProcessA
CreateWaitableTimerA
SetWaitableTimer
VirtualQueryEx
VirtualProtectEx
VirtualAllocEx
CreateFileMappingA
VirtualFreeEx
UnmapViewOfFile
ReadProcessMemory
WriteProcessMemory
CreateRemoteThread
WaitForSingleObject
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
DeleteFileA
GetCurrentDirectoryA
WriteFile
GetTickCount
GetModuleFileNameA
LCMapStringA
Sleep
GetVersionExA
GetCommandLineA
GetCurrentThread
IsBadCodePtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetStringTypeW
GetStringTypeA
RaiseException
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
CreateThread
RtlMoveMemory
MapViewOfFile
OpenFileMappingA
Process32Next
Process32First
GetProcAddress
LoadLibraryA
FreeLibrary
GetCurrentProcessId
TerminateProcess
OpenProcess
DeviceIoControl
lstrcpyn
CreateFileA
CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetTempPathA
VirtualAlloc
VirtualFree
GetWindowsDirectoryA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetVersion
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
InitializeCriticalSection
user32
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
ActivateKeyboardLayout
GetKeyboardLayout
SystemParametersInfoA
GetKeyboardLayoutList
UnloadKeyboardLayout
PostMessageA
GetForegroundWindow
wvsprintfA
MessageBoxTimeoutA
MessageBoxA
GetWindowThreadProcessId
GetClassNameA
GetGUIThreadInfo
IsWindowVisible
GetWindow
GetDesktopWindow
GetAsyncKeyState
CallWindowProcA
KillTimer
SetTimer
MsgWaitForMultipleObjects
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
GetWindowTextA
advapi32
RegSetValueExA
CryptCreateHash
CryptReleaseContext
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueA
RegEnumValueA
RegFlushKey
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptAcquireContextA
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 208KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ