Static task
static1
Behavioral task
behavioral1
Sample
2082ea496b43c4fb874b27e12e7e0c194d722b7feda3eeb5d62fd2edf6942f28.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2082ea496b43c4fb874b27e12e7e0c194d722b7feda3eeb5d62fd2edf6942f28.dll
Resource
win10v2004-20220901-en
General
-
Target
2082ea496b43c4fb874b27e12e7e0c194d722b7feda3eeb5d62fd2edf6942f28
-
Size
120KB
-
MD5
f65ec92c8474db25bf30e66dcaedff9b
-
SHA1
b77af7cfed52d289842600dde4de35377d78fd7c
-
SHA256
2082ea496b43c4fb874b27e12e7e0c194d722b7feda3eeb5d62fd2edf6942f28
-
SHA512
54f1ee4da4d1db436fc1bd5adae50817ad9b76c9315e429065b44833c401b7e7b9eae0cb72e28ff0bea92a8bb0f3f56b20377d32b3515c87d663c7aedd1d54e5
-
SSDEEP
3072:rpTZvTTG3yp5tiJv30sLcUqnv6MBCimczxq1i4gPro:5ZTTGCp5tihK6s3zx4iF
Malware Config
Signatures
Files
-
2082ea496b43c4fb874b27e12e7e0c194d722b7feda3eeb5d62fd2edf6942f28.dll windows x86
b16d61e1425d751416f670cc7cf0a19c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedExchange
ExpandEnvironmentStringsA
GetFullPathNameA
GetDriveTypeA
SearchPathA
lstrlenA
OutputDebugStringA
GetModuleFileNameA
InitializeCriticalSection
MultiByteToWideChar
UnhandledExceptionFilter
InterlockedIncrement
lstrlenW
lstrcmpiA
WideCharToMultiByte
CloseHandle
lstrcpyA
lstrcatA
SetLastError
SizeofResource
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
LocalFree
lstrcmpA
GetSystemDirectoryW
LocalAlloc
GetVersionExA
FormatMessageA
FormatMessageW
CreateFileW
GetFileAttributesA
lstrcpyW
CreateEventW
CreateThread
WaitForMultipleObjects
SetEvent
ResetEvent
WaitForSingleObject
SetUnhandledExceptionFilter
DeleteCriticalSection
GetSystemDirectoryA
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
SetHandleInformation
InterlockedDecrement
GetTickCount
GlobalFree
GetCommandLineA
GlobalAlloc
lstrcpynA
VirtualProtect
user32
SetForegroundWindow
SendMessageW
SetWindowPos
IsWindowVisible
ShowWindow
IsZoomed
IsIconic
InsertMenuW
InsertMenuA
LoadStringW
LoadStringA
CharNextA
SetMenuItemInfoA
ScreenToClient
GetSystemMetrics
IsWindow
AdjustWindowRect
GetWindowRect
CreateWindowExW
GetClientRect
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
GetWindowTextW
InSendMessage
PostMessageW
SetRectEmpty
LoadCursorW
SetWindowLongW
DefWindowProcW
BeginPaint
EndPaint
DestroyWindow
UnregisterClassW
GetWindowLongW
SetWindowTextW
RegisterClassW
advapi32
RegDeleteKeyA
RegOpenKeyExW
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
gdi32
SelectPalette
RealizePalette
StretchDIBits
DeleteObject
SetStretchBltMode
GetObjectType
ole32
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoUninitialize
CoInitialize
msvcr71
memset
strtok
strchr
_stricmp
strstr
getenv
memmove
atoi
_strupr
toupper
_strnicmp
_strlwr
_adjust_fdiv
_except_handler3
memcpy
malloc
calloc
free
_vsnprintf
_initterm
swprintf
wcscpy
wcscat
_wcsicmp
realloc
wcsncpy
strncpy
__CppXcptFilter
__dllonexit
_onexit
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ