Static task
static1
Behavioral task
behavioral1
Sample
cdaac5eff3e3f5f396c2a9f4a5f8853edd6ce696dac31c060d1acbf4c30017a2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cdaac5eff3e3f5f396c2a9f4a5f8853edd6ce696dac31c060d1acbf4c30017a2.dll
Resource
win10v2004-20221111-en
General
-
Target
cdaac5eff3e3f5f396c2a9f4a5f8853edd6ce696dac31c060d1acbf4c30017a2
-
Size
103KB
-
MD5
f934937e915d0a8b92ae3adfe16f524a
-
SHA1
6d92c45aa268bf790666104877d31c5a0b1c8002
-
SHA256
cdaac5eff3e3f5f396c2a9f4a5f8853edd6ce696dac31c060d1acbf4c30017a2
-
SHA512
0d2a1a7c1b2cfcb30c2b848b78b36e62e4464acacfb43133788113122df11fac844152cc999753f76abfa959672be4ba2957f05ed0b27187e029587c5c2d129e
-
SSDEEP
1536:+bfBDJaCA3sabobK2hxY6zhSnuKYGz17hEYlZmLh2693TK45dsC8WhIt6WzUf:+b7Y2K2hy6zhZKY07l626VK5ChItxAf
Malware Config
Signatures
Files
-
cdaac5eff3e3f5f396c2a9f4a5f8853edd6ce696dac31c060d1acbf4c30017a2.dll windows x86
18a916d074202c2f09c649548a9f6400
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetDiskFreeSpaceA
SetErrorMode
GetFileAttributesA
GetLocalTime
SystemTimeToFileTime
GetVersionExA
GetFileTime
SetFileTime
CompareStringA
FreeLibrary
GetProcAddress
lstrcatA
lstrcmpiA
LocalAlloc
LocalFree
CloseHandle
CompareFileTime
lstrcmpA
lstrcpyA
FindClose
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
GetPrivateProfileStringA
CreateFileA
GetSystemDirectoryA
GetShortPathNameA
RemoveDirectoryA
DeviceIoControl
lstrlenW
CreateFileW
ReleaseMutex
WaitForSingleObject
CreateTimerQueueTimer
DeleteTimerQueueTimer
WideCharToMultiByte
InterlockedExchange
Sleep
InterlockedCompareExchange
FormatMessageA
WritePrivateProfileStringA
TlsSetValue
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
HeapAlloc
HeapFree
GetProcessHeap
lstrlenA
GetLastError
GetModuleFileNameA
LoadLibraryA
GetLocaleInfoA
GetCommandLineA
VirtualProtect
VirtualFree
lstrcpynA
VirtualAlloc
user32
LoadIconA
SetDlgItemTextA
GetClientRect
CharUpperA
SetWindowLongA
SetWindowTextA
DestroyMenu
LoadMenuA
MessageBoxA
RemoveMenu
ReleaseDC
GetDC
GetSubMenu
EndDialog
SendMessageA
GetDlgItem
SetCursor
LoadCursorA
DestroyIcon
SendDlgItemMessageA
GetMenuItemInfoA
wsprintfA
IsWindow
LoadStringA
EnableWindow
GetSystemMetrics
SendMessageTimeoutA
GetWindowLongA
SetWindowPos
GetWindowRect
ClientToScreen
SetWindowRgn
OffsetRect
ShowWindow
GetActiveWindow
GetParent
advapi32
RegQueryValueExA
RegSetValueExA
RegSetValueExW
RegSetValueA
RegEnumKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
gdi32
GetDeviceCaps
ole32
CoCreateInstance
msvcr71
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
_unlock
memcpy
_iob
_except_handler3
_vsnprintf
memset
_errno
_wcsicmp
strncmp
_amsg_exit
free
_wcsnicmp
_vsnwprintf
_onexit
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_isatty
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ