Static task
static1
Behavioral task
behavioral1
Sample
bbf46b3af988a37fd0e6e70bcea00219112356af6b3c97d9080ede741ae47a59.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbf46b3af988a37fd0e6e70bcea00219112356af6b3c97d9080ede741ae47a59.dll
Resource
win10v2004-20220812-en
General
-
Target
bbf46b3af988a37fd0e6e70bcea00219112356af6b3c97d9080ede741ae47a59
-
Size
91KB
-
MD5
8934d3ccd0aa92c6a4aebdf1efe173e1
-
SHA1
41253fdb2ea05a07a7c6e9ba62b8dc959fcbe74f
-
SHA256
bbf46b3af988a37fd0e6e70bcea00219112356af6b3c97d9080ede741ae47a59
-
SHA512
7b8a8ceccbbe8e1d3af9357390b4512a7595f457a7bc856963e27f3e372a4e3bd20e3eccb9037a09aac9ed39487fe3270ef7cef22d75c4e1334e933b08ceb0f8
-
SSDEEP
1536:/rZMmfdwXFm4pSoJHJ0c9L6iHUWQFCrhl6IZ55vxH3/a1g7qMfjXWq1cQ60mIh:/rZ/VwYkrdoWQIrhlZZ5PH3q4qMbXcXU
Malware Config
Signatures
Files
-
bbf46b3af988a37fd0e6e70bcea00219112356af6b3c97d9080ede741ae47a59.dll windows x86
049fd8831de2d8c8e2121ae07196f88a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
InterlockedIncrement
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ReleaseMutex
GetSystemDirectoryW
lstrcatW
lstrcpyW
lstrlenW
GetTickCount
CreateMutexW
Sleep
WriteFile
WideCharToMultiByte
CreateDirectoryW
GetProcessHeap
HeapReAlloc
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
GetLocaleInfoA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
IsBadReadPtr
LoadLibraryExW
FreeResource
GlobalFree
GetCommandLineA
VirtualProtect
ExpandEnvironmentStringsW
GlobalAlloc
user32
wsprintfW
advapi32
RegQueryValueExW
RegEnumValueW
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
ole32
CoCreateInstance
CoTaskMemFree
StringFromCLSID
msvcr71
__dllonexit
_onexit
__CppXcptFilter
malloc
_initterm
_except_handler3
_vsnprintf
sprintf
asctime
localtime
time
memmove
wcscmp
_wstat
wcstok
wcscat
_atoi64
swprintf
wcslen
wcscpy
_wcsicmp
_CxxThrowException
sscanf
wcsncpy
_adjust_fdiv
free
_XcptFilter
memcpy
_amsg_exit
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ