Static task
static1
Behavioral task
behavioral1
Sample
d514d3601ac2652bdba9b47232c2392f3e739585ef7139f32cd1954606f6ae3b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d514d3601ac2652bdba9b47232c2392f3e739585ef7139f32cd1954606f6ae3b.dll
Resource
win10v2004-20220901-en
General
-
Target
d514d3601ac2652bdba9b47232c2392f3e739585ef7139f32cd1954606f6ae3b
-
Size
103KB
-
MD5
3246ac50a414808ead31738c7351e3b1
-
SHA1
a6cb3aecce1bd8335937ef08299773535bb5bd2e
-
SHA256
d514d3601ac2652bdba9b47232c2392f3e739585ef7139f32cd1954606f6ae3b
-
SHA512
35d19ecce41c50ae8cde002b43351fde976e1ea99288483c01993efe91810fe4596a8f2a0260f6d38d302314f6afd2a8c47437ad6a69ea55b6bc93e47c234fb2
-
SSDEEP
1536:m3Tp2Pw5jF2GjG/t9fL1r77opkt2AuTbe7dLa6qGDJ9UyV7rXSBk:o0Pw5YGjG19fp7Rt2x/ONqGDXUyVPSB
Malware Config
Signatures
Files
-
d514d3601ac2652bdba9b47232c2392f3e739585ef7139f32cd1954606f6ae3b.dll windows x86
fceb506ae5dde58b16b30762234f03bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
ExitProcess
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
IsValidCodePage
GetModuleFileNameA
GetCPInfo
WriteFile
HeapAlloc
HeapFree
LoadLibraryA
GetModuleHandleExW
GetLogicalDriveStringsW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetProcessHeap
FormatMessageW
LocalFree
HeapSize
SetUnhandledExceptionFilter
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
LeaveCriticalSection
SetEvent
CloseHandle
GetOverlappedResult
DeviceIoControl
CreateEventA
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
GetVersionExW
InterlockedDecrement
InterlockedIncrement
FreeLibrary
CreateEventW
GetModuleHandleW
GetCurrentThreadId
GetTickCount
CreateThread
lstrlenW
UnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetProcAddress
WideCharToMultiByte
DisableThreadLibraryCalls
MultiByteToWideChar
GetLastError
GetStartupInfoA
GlobalFree
GetCommandLineA
GlobalAlloc
EnterCriticalSection
VirtualProtect
user32
LoadStringW
CreateWindowExW
RegisterClassExW
PostMessageW
GetDlgItem
SetCursor
LoadCursorW
GetWindowTextLengthW
EnableWindow
SetWindowTextW
GetSystemMetrics
InvalidateRect
GetClientRect
SendDlgItemMessageW
CallWindowProcW
SetWindowLongW
MessageBeep
GetWindowTextW
GetWindowLongW
GetParent
ShowWindow
SetFocus
SendMessageW
advapi32
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegOpenKeyExW
RegCloseKey
gdi32
DeleteObject
CreateFontW
ole32
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
IIDFromString
msvcr71
_onexit
free
_amsg_exit
memset
wcschr
memmove
_except_handler3
_vsnwprintf
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_XcptFilter
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ