Static task
static1
Behavioral task
behavioral1
Sample
57fcdb30976d56dbbf1ece39a465bd2aa1ab268f74aab70fb8bbe0bb23a671c6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
57fcdb30976d56dbbf1ece39a465bd2aa1ab268f74aab70fb8bbe0bb23a671c6.dll
Resource
win10v2004-20221111-en
General
-
Target
57fcdb30976d56dbbf1ece39a465bd2aa1ab268f74aab70fb8bbe0bb23a671c6
-
Size
149KB
-
MD5
4e014fa8d9102cba3916b44308de38db
-
SHA1
e1a72c301d5a4018d2440b11f70e7f9e1ca3833b
-
SHA256
57fcdb30976d56dbbf1ece39a465bd2aa1ab268f74aab70fb8bbe0bb23a671c6
-
SHA512
9983c066b97d1e615f25b9b23fd332d929b9a65752bbd7d561234bc7f75cb43f6e21ce1726b66f5b657256814bf504aef36e1eb3e3dfa6c70adf54ed4e78dc29
-
SSDEEP
3072:ZG+Fd+6RvTI13u12t4h0+TmMPPO6u1uA6t:jdO0YSS+6MHRF
Malware Config
Signatures
Files
-
57fcdb30976d56dbbf1ece39a465bd2aa1ab268f74aab70fb8bbe0bb23a671c6.dll windows x86
bf3327322c951301a685f7bf52d57e9f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
sinh
strncmp
__p___initenv
free
__p__fmode
calloc
_controlfp
_adjust_fdiv
strstr
getenv
_XcptFilter
memcpy
__getmainargs
_except_handler3
_snprintf
strchr
__setusermatherr
realloc
__p__commode
_exit
_initterm
__set_app_type
_cexit
comdlg32
GetOpenFileNameA
kernel32
GetNumberFormatA
lstrcmpA
GetShortPathNameA
GetStringTypeW
GetStringTypeA
GlobalLock
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GetPrivateProfileStringA
VirtualProtectEx
GetCPInfo
WriteConsoleA
GetCurrentThreadId
GetStartupInfoA
RaiseException
GetCurrentDirectoryA
FlushFileBuffers
SetFileAttributesA
GetVersionExW
lstrlenW
user32
DrawIcon
IsZoomed
GetWindowPlacement
DestroyMenu
SetDlgItemTextA
GetMenuItemCount
FillRect
RegisterClipboardFormatA
advapi32
AddAccessAllowedAce
RegQueryInfoKeyA
SetSecurityDescriptorGroup
InitiateSystemShutdownA
RegFlushKey
AdjustTokenPrivileges
RegQueryValueExW
OpenProcessToken
GetSecurityDescriptorDacl
IsValidSid
RegEnumKeyW
OpenThreadToken
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueA
RegCreateKeyExA
CryptAcquireContextA
RegDeleteValueW
gdi32
EnumFontsA
SetMetaFileBitsEx
OffsetWindowOrgEx
SetWindowExtEx
InvertRgn
TextOutA
GetTextExtentPointA
StartPage
GetClipRgn
AbortDoc
SetRectRgn
ole32
CoInitializeEx
StgCreateDocfileOnILockBytes
OleSetMenuDescriptor
CoInitializeSecurity
CoUninitialize
OleInitialize
GetRunningObjectTable
StgOpenStorage
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StringFromCLSID
comctl32
ImageList_BeginDrag
ImageList_SetIconSize
PropertySheetA
ImageList_Add
CreatePropertySheetPageA
ImageList_GetImageInfo
DestroyPropertySheetPage
ImageList_DragShowNolock
CreateStatusWindowA
ImageList_DrawEx
ImageList_Read
PropertySheetW
ImageList_Replace
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ