Static task
static1
Behavioral task
behavioral1
Sample
5260668177847e0ea09df530e9f29e6b113e89430328f9eee57da8ece636e573.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral2
Sample
5260668177847e0ea09df530e9f29e6b113e89430328f9eee57da8ece636e573.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
General
-
Target
5260668177847e0ea09df530e9f29e6b113e89430328f9eee57da8ece636e573
-
Size
236KB
-
MD5
982c246199392e9a2d27ef0ebc571710
-
SHA1
183d4a6f3184993614031a18279ad0352b5fa9d8
-
SHA256
5260668177847e0ea09df530e9f29e6b113e89430328f9eee57da8ece636e573
-
SHA512
fd620d808ecf8f31d083c4275b1fc7ac8569a30e82ae0cc8ad3e5f27db595be467ede92b28226b7d19c493a209c8f4ebbdbf3b4c171041a9e3c0c9c4b52c7d5a
-
SSDEEP
3072:513PH3PitAMPoV9Q9wq2Zhj6Fs55lZ9OLvO2F8TMnxmi/6ve9QrFvHHCGwqVEiR9:j/qPo3hjesLtOa4xD6vkQx/5Gx
Malware Config
Signatures
Files
-
5260668177847e0ea09df530e9f29e6b113e89430328f9eee57da8ece636e573.dll windows x86
05fb397486d73b030cc97c76eb421fc9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryW
GlobalAddAtomW
GlobalDeleteAtom
GlobalFindAtomA
GlobalFix
GlobalFree
HeapAlloc
HeapDestroy
InterlockedExchangeAdd
IsBadHugeReadPtr
IsBadReadPtr
IsBadStringPtrA
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryExA
LocalFileTimeToFileTime
LocalUnlock
LockResource
MapUserPhysicalPagesScatter
MapViewOfFile
MoveFileWithProgressW
MultiByteToWideChar
OpenEventA
PrepareTape
ProcessIdToSessionId
QueryInformationJobObject
QueueUserAPC
ReadConsoleA
ReadConsoleInputA
ReadConsoleOutputA
ReadConsoleOutputW
ReadProcessMemory
RemoveDirectoryW
ReplaceFileW
ResetWriteWatch
RtlFillMemory
RtlMoveMemory
ScrollConsoleScreenBufferA
SetCalendarInfoA
SetCommTimeouts
SetComputerNameExA
SetConsoleCP
SetConsoleCtrlHandler
SetDefaultCommConfigW
SetEndOfFile
SetEvent
SetFileApisToANSI
SetFileApisToOEM
SetProcessAffinityMask
SetProcessShutdownParameters
SetStdHandle
SetTapePosition
SetThreadIdealProcessor
SetThreadPriority
SetVolumeMountPointA
SetWaitableTimer
SuspendThread
SwitchToFiber
SystemTimeToTzSpecificLocalTime
Thread32First
VerLanguageNameW
VerifyVersionInfoA
WaitForDebugEvent
WaitNamedPipeW
WriteConsoleInputW
WriteConsoleOutputW
WriteFileEx
WriteProcessMemory
WriteProfileStringW
_hwrite
_llseek
_lopen
lstrcmpA
lstrcpy
lstrcpyn
lstrcpynA
lstrcatA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
VirtualAlloc
LoadLibraryW
GetSystemInfo
GetVolumePathNameA
AddAtomW
AllocConsole
BackupRead
BackupWrite
Beep
BuildCommDCBW
CancelDeviceWakeupRequest
CancelIo
CommConfigDialogA
CompareFileTime
CopyFileExW
CreateFileMappingA
CreateFileW
CreateHardLinkA
CreateSemaphoreA
CreateWaitableTimerW
DefineDosDeviceW
DeleteFileA
DeleteTimerQueue
DisableThreadLibraryCalls
DisconnectNamedPipe
DosDateTimeToFileTime
EnumCalendarInfoA
EnumDateFormatsW
EnumSystemCodePagesW
EnumSystemLanguageGroupsW
EnumSystemLocalesW
EnumTimeFormatsA
EraseTape
ExpandEnvironmentStringsW
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
FindAtomW
FindFirstFileExA
FindFirstVolumeA
FindFirstVolumeMountPointA
FindFirstVolumeMountPointW
FindNextFileA
FindNextVolumeMountPointW
FindResourceExA
FindResourceW
FindVolumeMountPointClose
FlushInstructionCache
FoldStringA
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
GetAtomNameW
GetBinaryType
GetCalendarInfoA
GetCalendarInfoW
GetCommConfig
GetCompressedFileSizeW
GetComputerNameExW
GetComputerNameW
GetConsoleAliasExesA
GetConsoleAliasExesW
GetCurrentConsoleFont
GetCurrentDirectoryW
GetCurrentThread
GetDateFormatW
GetDiskFreeSpaceExW
CreateFileA
GetDiskFreeSpaceW
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetLocalTime
GetLocaleInfoW
GetLogicalDriveStringsA
GetLongPathNameW
GetModuleHandleA
GetNamedPipeHandleStateA
GetPriorityClass
GetPrivateProfileSectionNamesW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructW
GetProfileStringA
GetShortPathNameA
GetStartupInfoW
GetSystemDefaultLCID
GetSystemPowerStatus
GetSystemTime
GetSystemWindowsDirectoryA
GetVolumeNameForVolumeMountPointW
GetVersionExA
GetTimeFormatA
GetThreadPriorityBoost
GetThreadPriority
GetThreadContext
GetTapePosition
AddAtomA
GetSystemWindowsDirectoryW
user32
EnableMenuItem
EndDeferWindowPos
EndDialog
EnumClipboardFormats
EnumDisplayDevicesW
EnumDisplayMonitors
EnumPropsExW
EnumPropsW
DrawTextExW
EnumWindows
GetActiveWindow
GetAltTabInfoW
GetCaretBlinkTime
GetClassInfoA
GetDialogBaseUnits
GetDlgCtrlID
GetDlgItem
DrawStateA
DrawIconEx
DrawCaption
DrawAnimatedRects
DragDetect
DlgDirSelectComboBoxExA
DlgDirListW
DlgDirListComboBoxW
DispatchMessageA
DialogBoxIndirectParamA
DestroyIcon
DestroyCaret
DestroyAcceleratorTable
DefFrameProcW
GetDlgItemInt
DefFrameProcA
DdeQueryStringW
DdePostAdvise
DdeNameService
DdeImpersonateClient
DdeFreeDataHandle
DdeEnableCallback
DdeDisconnect
DdeConnect
CreatePopupMenu
CreateDialogIndirectParamA
CopyRect
CopyImage
CopyIcon
CloseClipboard
ClipCursor
CharUpperW
CharUpperA
CharToOemW
CharPrevA
CharLowerA
ChangeDisplaySettingsA
CascadeChildWindows
CallWindowProcA
BroadcastSystemMessage
BringWindowToTop
BlockInput
AttachThreadInput
AppendMenuW
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
GetDlgItemTextA
GetDoubleClickTime
GetForegroundWindow
GetGUIThreadInfo
GetGuiResources
GetInputDesktop
GetKeyNameTextA
GetKeyNameTextW
DefWindowProcA
GetKeyboardLayoutNameW
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemInfoW
GetMessageA
GetMouseMovePointsEx
GetNextDlgGroupItem
GetNextDlgTabItem
GetOpenClipboardWindow
GetScrollRange
GetUpdateRect
GetUserObjectSecurity
GetWindowContextHelpId
GetWindowModuleFileNameW
GetWindowPlacement
GetWindowTextLengthW
GetWindowWord
HiliteMenuItem
IMPGetIMEA
InsertMenuW
InternalGetWindowText
wvsprintfA
mouse_event
WindowFromPoint
WINNLSGetEnableStatus
VkKeyScanExW
ValidateRect
UserHandleGrantAccess
UpdateLayeredWindow
UnregisterClassA
UnhookWinEvent
TranslateAcceleratorA
TrackMouseEvent
ToUnicode
TileChildWindows
SystemParametersInfoW
SystemParametersInfoA
SwitchDesktop
SwapMouseButton
ShowScrollBar
SetWindowTextW
SetWindowPlacement
SetUserObjectInformationA
SetTimer
SetThreadDesktop
SetSystemCursor
SetScrollRange
SetPropW
SetParent
SetMenuItemInfoA
SetMenuInfo
SetMenu
SetLayeredWindowAttributes
SetCursor
SetClipboardViewer
SendNotifyMessageW
SendMessageTimeoutW
SendMessageCallbackW
SendInput
RemovePropW
RegisterWindowMessageA
RegisterHotKey
RegisterDeviceNotificationW
RedrawWindow
PostThreadMessageW
PostThreadMessageA
PeekMessageW
PaintDesktop
OpenDesktopA
OemToCharW
OemKeyScan
MessageBeep
MapVirtualKeyW
MapVirtualKeyA
LookupIconIdFromDirectory
LockSetForegroundWindow
LoadCursorFromFileA
LoadBitmapW
LoadAcceleratorsA
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsMenu
IsHungAppWindow
IsDlgButtonChecked
IsDialogMessageW
IsCharUpperW
IsCharLowerW
EnumThreadWindows
IsCharAlphaNumericW
gdi32
DeleteEnhMetaFile
CloseEnhMetaFile
LineTo
MoveToEx
Rectangle
CreateEnhMetaFileA
GetStockObject
PlayEnhMetaFile
comdlg32
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
ole32
WriteOleStg
WriteClassStm
WriteClassStg
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserFree
UtGetDvtd16Info
StringFromIID
StringFromCLSID
StgOpenStorageOnILockBytes
StgOpenPropStg
StgCreateStorageEx
StgCreateDocfileOnILockBytes
StgConvertVariantToProperty
StgConvertPropertyToVariant
SetDocumentBitStg
STGMEDIUM_UserMarshal
SNB_UserUnmarshal
SNB_UserFree
RevokeDragDrop
ReadStringStream
ReadOleStg
PropVariantCopy
PropVariantClear
PropStgNameToFmtId
OpenOrCreateStream
OleUninitialize
OleTranslateAccelerator
OleSetMenuDescriptor
OleRun
OleRegGetMiscStatus
OleRegEnumFormatEtc
OleQueryLinkFromData
OleNoteObjectVisible
OleLoadFromStream
OleLoad
OleIsRunning
OleInitialize
OleGetIconOfClass
OleGetClipboard
OleGetAutoConvert
OleDoAutoConvert
OleDestroyMenuDescriptor
OleCreateStaticFromData
OleCreateMenuDescriptor
OleCreateLinkFromDataEx
OleCreateLinkFromData
OleCreateFromData
OleCreateDefaultHandler
OleCreate
OleConvertIStorageToOLESTREAMEx
OleConvertIStorageToOLESTREAM
OleBuildVersion
MonikerRelativePathTo
IsEqualGUID
HWND_UserSize
HPALETTE_UserUnmarshal
HPALETTE_UserMarshal
HPALETTE_UserFree
HMETAFILE_UserUnmarshal
HMETAFILE_UserSize
HMETAFILE_UserMarshal
HMENU_UserUnmarshal
HICON_UserFree
HGLOBAL_UserUnmarshal
HGLOBAL_UserMarshal
HDC_UserSize
HDC_UserFree
HBRUSH_UserUnmarshal
HBRUSH_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserMarshal
HBITMAP_UserFree
HACCEL_UserUnmarshal
HACCEL_UserSize
GetRunningObjectTable
GetHookInterface
GetHGlobalFromStream
GetConvertStg
GetClassFile
DllGetClassObjectWOW
DllDebugObjectRPCHook
CreatePointerMoniker
CreateObjrefMoniker
CreateItemMoniker
CreateDataCache
CreateClassMoniker
CreateBindCtx
CoTreatAsClass
CoTestCancel
CoTaskMemRealloc
CoSwitchCallContext
CoSuspendClassObjects
CoReleaseServerProcess
CoReleaseMarshalData
CoRegisterSurrogateEx
CoRegisterPSClsid
CoRegisterMessageFilter
CoRegisterMallocSpy
CoQueryReleaseObject
CoQueryProxyBlanket
CoMarshalHresult
CoLoadLibrary
CoIsHandlerConnected
CoInstall
CoInitializeWOW
CoInitializeEx
CoInitialize
CoGetStandardMarshal
CoGetPSClsid
CoGetObjectContext
CoGetObject
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoGetInstanceFromIStorage
CoGetCurrentProcess
CoGetCallerTID
CoGetCallContext
CoGetApartmentID
CoFreeUnusedLibraries
CoFreeAllLibraries
CoFileTimeToDosDateTime
CoFileTimeNow
CoEnableCallCancellation
CoDosDateTimeToFileTime
CoDisconnectObject
CoDeactivateObject
CoCreateInstanceEx
CoCreateGuid
CoCopyProxy
CoCancelCall
CoAddRefServerProcess
CLSIDFromProgID
CLIPFORMAT_UserSize
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserFree
UtConvertDvtd32toDvtd16
CoRegisterChannelHook
oleaut32
VarI1FromI4
VarI1FromCy
VarI1FromBool
VarFormatPercent
VarFormatCurrency
VarFormat
VarFix
VarDiv
VarDecInt
VarDecFromUI1
VarDecFromR4
VarDecFromI1
VarDecFromDisp
VarDecFromCy
VarDecFromBool
VarDecFix
VarDecCmpR8
VarDateFromUdate
VarDateFromUI4
VarDateFromUI2
VarDateFromUI1
VarDateFromStr
VarDateFromR8
VarDateFromR4
VarDateFromI1
VarDateFromDec
VarDateFromCy
VarCyRound
VarCyMulI4
VarCyMul
VarCyInt
VarCyFromUI2
VarCyFromR4
VarCyFromI4
VarCyFromI2
VarCyFromDate
VarCyFromBool
VarCyFix
VarCyAdd
VarCyAbs
VarCat
VarBstrFromUI2
VarBstrFromUI1
VarBstrFromI2
VarBstrFromDate
VarBstrCat
VarBoolFromUI4
VarBoolFromUI2
VarBoolFromI4
VarBoolFromDate
VARIANT_UserMarshal
VARIANT_UserFree
SysReAllocStringLen
SysFreeString
SafeArraySetIID
SafeArrayPutElement
SafeArrayGetRecordInfo
SafeArrayGetElemsize
SafeArrayCreateVectorEx
SafeArrayCreateVector
SafeArrayCreateEx
SafeArrayCopyData
SafeArrayAllocDescriptor
SafeArrayAccessData
RegisterTypeLi
RegisterActiveObject
OleTranslateColor
OleLoadPicturePath
OleLoadPictureFileEx
OleLoadPictureFile
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_Unmarshal
GetErrorInfo
GetAltMonthNames
GetActiveObject
DispInvoke
CreateDispTypeInfo
ClearCustData
BstrFromVector
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserFree
VarI1FromR4
VarI1FromStr
VarI1FromUI1
VarI1FromUI2
VarI2FromDate
VarI2FromDec
VarI2FromI1
VarI2FromR8
VarI2FromUI1
VarI4FromBool
VarI4FromDec
VarI4FromR8
VarI4FromUI1
VarI4FromUI2
VarI4FromUI4
VarInt
VarMod
VarNeg
VarNot
VarNumFromParseNum
VarR4FromI1
VarR4FromR8
VarR4FromStr
VarR4FromUI4
VarR8FromDate
VarR8FromDisp
VarR8FromI1
VarR8FromR4
VarR8FromUI2
VarR8FromUI4
VarR8Pow
VarSu
VarTokenizeFormatString
VarUI1FromBool
VarUI1FromCy
VarUI1FromDate
VarUI1FromDec
VarUI1FromDisp
VarUI1FromI1
VarUI1FromI4
VarUI1FromR8
VarUI1FromStr
VarUI1FromUI2
VarUI1FromUI4
VarUI2FromBool
VarUI2FromI1
VarUI2FromI2
VarUI2FromI4
VarUI2FromR4
VarUI2FromStr
VarUI4FromCy
VarUI4FromDisp
VarUI4FromI1
VarUI4FromI4
VarUI4FromR4
VarUI4FromStr
VarUI4FromUI1
VarUI4FromUI2
VarUdateFromDate
VarWeekdayName
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
VariantTimeToDosDateTime
VectorFromBstr
VarI1FromDec
comctl32
_TrackMouseEvent
UninitializeFlatSB
ord3
PropertySheetW
PropertySheetA
PropertySheet
ord2
ord13
ord14
InitializeFlatSB
InitMUILanguage
InitCommonControlsEx
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_SetIconSize
ImageList_SetFilter
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_Read
ImageList_Merge
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetDragImage
ImageList_GetBkColor
ImageList_EndDrag
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Draw
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Create
ImageList_Copy
ImageList_BeginDrag
ImageList_AddMasked
ImageList_AddIcon
GetMUILanguage
ord4
FlatSB_ShowScrollBar
FlatSB_SetScrollRange
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollProp
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
FlatSB_EnableScrollBar
DrawStatusTextW
ord5
ord15
DestroyPropertySheetPage
ord16
CreateToolbarEx
ord7
CreateStatusWindowW
ord6
CreateStatusWindow
CreatePropertySheetPageW
CreatePropertySheetPageA
CreatePropertySheetPage
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g9 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g8 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g7 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g2 Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ