Static task
static1
Behavioral task
behavioral1
Sample
a64d37c374a382a56f2831cbbdd69dc2477afdbe507ee699f06aa3e8769594da.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a64d37c374a382a56f2831cbbdd69dc2477afdbe507ee699f06aa3e8769594da.dll
Resource
win10v2004-20221111-en
General
-
Target
a64d37c374a382a56f2831cbbdd69dc2477afdbe507ee699f06aa3e8769594da
-
Size
104KB
-
MD5
80773121f429e46540ff6e28f6300e8a
-
SHA1
871fac7b9f47972fd4e76cde7fbe4429e89f6858
-
SHA256
a64d37c374a382a56f2831cbbdd69dc2477afdbe507ee699f06aa3e8769594da
-
SHA512
52f3e1487ee4b4f2cb3476aa3b11f8c3cf474f514ca53308cbcde76354e5270d8bd0766a3209d2316be0434a86501e0999f283cd1d74deb5f3df076e947a0a82
-
SSDEEP
1536:cFsmZ3Z0NROagXNxkMemTWGJZzUCZ5rOuzrQw2dBkVSgXclvRK24jltyONUrO:5RHe33ZY4dZvV/XMvRYJQ6UrO
Malware Config
Signatures
Files
-
a64d37c374a382a56f2831cbbdd69dc2477afdbe507ee699f06aa3e8769594da.dll windows x86
96fd40b3fc393f58f128eb2b044cbdd8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnregisterWait
DeleteCriticalSection
GetSystemInfo
OpenFileMappingW
MapViewOfFileEx
CreateFileMappingW
VirtualAlloc
InitializeCriticalSection
Sleep
EnterCriticalSection
LeaveCriticalSection
SetCurrentDirectoryW
ChangeTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueTimer
RegisterWaitForSingleObjectEx
IsDebuggerPresent
LocalAlloc
TlsGetValue
GlobalLock
TlsSetValue
LocalFree
InterlockedExchange
InterlockedCompareExchange
GetModuleHandleW
GetModuleFileNameW
GetLastError
lstrlenW
InterlockedExchangeAdd
InterlockedDecrement
InterlockedIncrement
CreateEventW
CloseHandle
VirtualProtect
GlobalFree
GetCommandLineA
UnmapViewOfFile
GlobalAlloc
user32
wsprintfA
advapi32
RegCloseKey
RegNotifyChangeKeyValue
RegOpenKeyExW
CredFree
RevertToSelf
CredUnmarshalCredentialW
FreeSid
RegisterTraceGuidsW
UnregisterTraceGuids
RegSetValueExW
StartTraceW
EnableTrace
ControlTraceW
TraceMessage
RegQueryValueExW
msvcr71
_adjust_fdiv
__dllonexit
_except_handler3
memcpy
wcschr
memset
_wcsicmp
free
_initterm
_onexit
fread
malloc
_setjmp3
_amsg_exit
_XcptFilter
__CppXcptFilter
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ