CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
8ecdd1d604918136d4338b42821792bf053a51c6a69f39493b049d2e3ffe2f66.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ecdd1d604918136d4338b42821792bf053a51c6a69f39493b049d2e3ffe2f66.dll
Resource
win10v2004-20220812-en
General
-
Target
8ecdd1d604918136d4338b42821792bf053a51c6a69f39493b049d2e3ffe2f66
-
Size
480KB
-
MD5
b43bdfd118d7e3a61a99a724ff953870
-
SHA1
a95bde9b5243b5c917a9c8190b1c9466e10d6ecf
-
SHA256
8ecdd1d604918136d4338b42821792bf053a51c6a69f39493b049d2e3ffe2f66
-
SHA512
bac914badd3cddad4e9105f2e7ebb1d9cf59c1fabbb7bf9b1c89802cf97127d5495f287caedd109c05cf2c2d03149309f62b8be765679c64f1ae9d71fb14dc72
-
SSDEEP
12288:28MfS25YVEYZ5u7xSa/5pt7iuWyyx6qBvRDVpwUlYy1k45Kq:Q/vUm745Kq
Malware Config
Signatures
Files
-
8ecdd1d604918136d4338b42821792bf053a51c6a69f39493b049d2e3ffe2f66.dll windows x86
301141dca5ffe700f7c946ac2d0d3a74
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dbg
Error
kernel32
HeapDestroy
CloseHandle
GetProcAddress
LoadLibraryA
GetModuleHandleA
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
HeapReAlloc
IsBadReadPtr
GetCommandLineA
GetVersion
Sleep
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
CreateDirectoryA
WideCharToMultiByte
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
RaiseException
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadCodePtr
SetFilePointer
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoW
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
Exports
Exports
Sections
.text Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE