Static task
static1
Behavioral task
behavioral1
Sample
8bc6e579911f621fcf5fd3e1c83f39d7ca8d9b45a768deb5c93de44ca0cca1cd.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8bc6e579911f621fcf5fd3e1c83f39d7ca8d9b45a768deb5c93de44ca0cca1cd.dll
Resource
win10v2004-20220812-en
General
-
Target
8bc6e579911f621fcf5fd3e1c83f39d7ca8d9b45a768deb5c93de44ca0cca1cd
-
Size
838KB
-
MD5
1b4caa9b06e61ddaee7fc4028b91e730
-
SHA1
31600b64404ce0baf0729c70922ef3da46d8fc31
-
SHA256
8bc6e579911f621fcf5fd3e1c83f39d7ca8d9b45a768deb5c93de44ca0cca1cd
-
SHA512
c43f264672160578366b6418f9758b9f200db3e8917a28263a496d767b6b2cd7a4f4030cb82218bc161a44d5934098559e6587fd95af11bceea5f2b2b533b6cc
-
SSDEEP
24576:K5P+zbKMnFu3VnwL2LofdSNrJZMItwCdtyOax3+G:W+qsSnWNurkwwHzR+
Malware Config
Signatures
Files
-
8bc6e579911f621fcf5fd3e1c83f39d7ca8d9b45a768deb5c93de44ca0cca1cd.dll windows x86
a99173737389225598d5bc15e9da5757
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
InterlockedExchange
QueryPerformanceCounter
ConvertDefaultLocale
GetStdHandle
GlobalUnlock
EnumResourceLanguagesW
LocalFileTimeToFileTime
GetConsoleMode
CloseHandle
GetCommandLineA
UnhandledExceptionFilter
SizeofResource
GetACP
SetEndOfFile
Sleep
GetCommandLineW
HeapFree
SetEnvironmentVariableA
UnlockFile
DuplicateHandle
LockResource
GetModuleFileNameA
LockFile
SetUnhandledExceptionFilter
GlobalReAlloc
GetSystemInfo
GetLastError
HeapSize
GlobalDeleteAtom
WriteFile
GlobalFree
GetSystemTimeAsFileTime
LocalReAlloc
GetCurrentThreadId
GetStartupInfoA
GetFileType
CompareStringA
SetLastError
GlobalAlloc
LocalAlloc
FreeEnvironmentStringsA
HeapReAlloc
GetLocaleInfoA
lstrcmpA
VirtualAlloc
FindClose
FileTimeToLocalFileTime
SetStdHandle
LeaveCriticalSection
GlobalLock
HeapCreate
ReadFile
HeapDestroy
LocalFree
RtlUnwind
GetSystemDirectoryA
FlushFileBuffers
DeleteCriticalSection
lstrlenA
GetFileSize
SetErrorMode
RaiseException
TerminateProcess
IsDebuggerPresent
GetConsoleCP
GetOEMCP
SetFileTime
FileTimeToSystemTime
MulDiv
GetThreadLocale
EnterCriticalSection
GetVersionExA
InitializeCriticalSection
GetStringTypeA
InterlockedIncrement
GetWindowsDirectoryA
LCMapStringA
FreeLibrary
VirtualQuery
HeapAlloc
InterlockedDecrement
GetConsoleOutputCP
TlsAlloc
GetProcessHeap
VirtualFree
FreeResource
LoadResource
SystemTimeToFileTime
GetFileTime
SetFilePointer
LoadLibraryA
GetEnvironmentStrings
GlobalHandle
TlsSetValue
TlsGetValue
GlobalFlags
SetHandleCount
TlsFree
GetTimeZoneInformation
GetCurrentProcessId
GetModuleHandleA
GetVersion
VirtualProtect
LoadLibraryExA
AddAtomA
WriteConsoleA
GetProcAddress
SetConsoleCP
FreeConsole
ReadConsoleInputA
GetTickCount
WriteConsoleInputA
AllocConsole
CreateFileA
ExitProcess
user32
IsRectEmpty
DestroyMenu
MapWindowPoints
GetScrollPos
GetDCEx
SetScrollRange
IsChild
MessageBeep
GetSystemMenu
SetCursor
DestroyWindow
GetNextDlgTabItem
DeferWindowPos
CopyRect
ShowWindow
GetWindowRect
GetClientRect
GetMenu
EnableMenuItem
UnpackDDElParam
IntersectRect
ScreenToClient
GetWindowThreadProcessId
GetTopWindow
GetLastActivePopup
EndDialog
GetScrollRange
UnregisterClassA
SetRectEmpty
ReleaseDC
GetScrollInfo
GetDlgItem
OffsetRect
CheckMenuItem
SystemParametersInfoA
ClientToScreen
CallNextHookEx
SetFocus
ShowOwnedPopups
EqualRect
SetRect
DestroyIcon
LockWindowUpdate
ScrollWindow
SendDlgItemMessageA
GetMessagePos
GetWindowDC
GetDesktopWindow
IsWindow
IsWindowVisible
SetActiveWindow
GetWindowRgn
BeginPaint
GetSysColorBrush
PostQuitMessage
MapDialogRect
SetWindowPos
SetCapture
ValidateRect
SetWindowContextHelpId
EndPaint
UnhookWindowsHookEx
InvalidateRgn
WindowFromPoint
InflateRect
SetScrollInfo
SetScrollPos
TrackPopupMenu
IsZoomed
FillRect
ReuseDDElParam
UpdateWindow
GetSubMenu
GetFocus
SetMenu
MoveWindow
IsIconic
EndDeferWindowPos
GetWindow
SetMenuItemBitmaps
GetNextDlgGroupItem
GetMenuItemCount
SetParent
GetDlgCtrlID
DrawIcon
IsWindowEnabled
GetWindowPlacement
GetMenuCheckMarkDimensions
CreatePopupMenu
GetForegroundWindow
GetDC
SetWindowRgn
GetKeyState
ReleaseCapture
BeginDeferWindowPos
GetCursorPos
DeleteMenu
BringWindowToTop
GetParent
SetTimer
GetMessageTime
KillTimer
GetSysColor
GetCapture
RedrawWindow
GetMenuState
GetMenuItemID
SetForegroundWindow
AdjustWindowRectEx
PtInRect
TranslateMessage
ShowScrollBar
InvalidateRect
GetActiveWindow
GetSystemMetrics
gdi32
ScaleWindowExtEx
RestoreDC
GetMapMode
GetStockObject
PtVisible
OffsetViewportOrgEx
GetTextColor
SaveDC
GetRgnBox
GetClipBox
StretchDIBits
CombineRgn
SelectObject
DeleteDC
Escape
SetMapMode
ExtSelectClipRgn
SetBkColor
CreateSolidBrush
PatBlt
CreateCompatibleDC
GetDeviceCaps
Ellipse
CreateCompatibleBitmap
CreateRectRgnIndirect
SetWindowExtEx
GetWindowExtEx
SetBkMode
SetRectRgn
ScaleViewportExtEx
OffsetRgn
SetViewportExtEx
SelectClipRgn
CreateEllipticRgn
CreatePatternBrush
SetTextColor
GetPixel
SetViewportOrgEx
DeleteObject
DPtoLP
ExcludeClipRect
BitBlt
CreateRectRgn
IntersectClipRect
GetBkColor
RectVisible
CreateBitmap
advapi32
SetFileSecurityW
RegCloseKey
shell32
DragFinish
DragAcceptFiles
ole32
CreateStreamOnHGlobal
CoRevokeClassObject
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRegisterMessageFilter
CLSIDFromString
CoCreateInstance
StgOpenStorageOnILockBytes
OleInitialize
CLSIDFromProgID
CoUninitialize
CoTaskMemAlloc
oleaut32
VariantCopy
SystemTimeToVariantTime
SysFreeString
OleCreateFontIndirect
VariantClear
SafeArrayDestroy
SysStringLen
VariantInit
SysAllocString
VariantChangeType
SysAllocStringLen
VariantTimeToSystemTime
OleLoadPicture
comctl32
ImageList_LoadImageW
shlwapi
PathIsUNCW
PathRemoveExtensionW
PathStripToRootW
PathFindFileNameW
PathFileExistsW
PathFindExtensionW
userenv
UnloadUserProfile
Sections
.text Size: 488KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 344KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ