xjxjv
Static task
static1
Behavioral task
behavioral1
Sample
853e25a7fd681d73998771515ebae819aea6a13d81040348382b5c3ef38215c4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
853e25a7fd681d73998771515ebae819aea6a13d81040348382b5c3ef38215c4.dll
Resource
win10v2004-20221111-en
General
-
Target
853e25a7fd681d73998771515ebae819aea6a13d81040348382b5c3ef38215c4
-
Size
550KB
-
MD5
5e9fb7211c71b57fc364dbeb09da9372
-
SHA1
6cc5080d6211699f391b361394fda88fedcea95c
-
SHA256
853e25a7fd681d73998771515ebae819aea6a13d81040348382b5c3ef38215c4
-
SHA512
a575da0eae48b825dfd8426a515615858087a691e9a0d5882405cac4a8ac466d3d885d6327f88aded0b2c3a067905c0b2c9143320fae91281cb0740a61c5d504
-
SSDEEP
6144:L/MW6xi+RMZBlQlII5jY2320NGN7c67/JrwnF6G7c9bccerREpXXUMATLnlBg2:L/Qxi+RMyzUKalK8bcrrR0XXUMaRBg
Malware Config
Signatures
Files
-
853e25a7fd681d73998771515ebae819aea6a13d81040348382b5c3ef38215c4.dll windows x86
fb3af67ef76e45bac086bbb58b3ec5e2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileSectionA
SetErrorMode
UnmapViewOfFile
WriteFile
HeapAlloc
GetFileSize
GetTickCount
GetTempPathA
SetUnhandledExceptionFilter
FindFirstFileA
FindFirstFileExA
ReadFile
SetFilePointer
GetFileAttributesA
GetCurrentProcess
LocalAlloc
GetProcessHeap
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
FindClose
CreateFileMappingA
HeapFree
LoadLibraryA
SetLastError
GetPrivateProfileStringA
GetCurrentDirectoryA
CreateFileA
GetLastError
OpenProcess
GetFileInformationByHandle
RemoveDirectoryA
FindNextFileA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
MapViewOfFile
CopyFileA
GetFullPathNameA
QueryPerformanceCounter
GetFileAttributesExA
DeleteFileA
FlushViewOfFile
SetEndOfFile
SetCurrentDirectoryA
GetProcAddress
ExpandEnvironmentStringsA
Sleep
CloseHandle
LocalFree
SetFileAttributesA
GetTempFileNameA
TerminateProcess
user32
CreateMenu
GetDesktopWindow
GetDlgItem
DestroyMenu
FindWindowA
GetDlgItemTextA
DestroyWindow
advapi32
OpenProcessToken
LookupPrivilegeValueA
ConvertStringSidToSidA
AdjustTokenPrivileges
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Exports
Exports
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 507KB - Virtual size: 507KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ