Static task
static1
Behavioral task
behavioral1
Sample
fc3300390207a3fbdc9e57a62b366fee110f27ad7c6ee179b7e2b11f2c3dbbb7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fc3300390207a3fbdc9e57a62b366fee110f27ad7c6ee179b7e2b11f2c3dbbb7.dll
Resource
win10v2004-20221111-en
General
-
Target
fc3300390207a3fbdc9e57a62b366fee110f27ad7c6ee179b7e2b11f2c3dbbb7
-
Size
372KB
-
MD5
a9a8ab170a263b859426b6f8d7d601d6
-
SHA1
5654a0e73cb65b0cd8466329e25f84994adc2253
-
SHA256
fc3300390207a3fbdc9e57a62b366fee110f27ad7c6ee179b7e2b11f2c3dbbb7
-
SHA512
21abaf4ffbefd3b4cda0743c46b49c2cfe387c41da3e9a12fdba02d857f4704592c06be34eabb2dd82499f25e407b8f4fb85098971f0a46ba48dc6b107ac6674
-
SSDEEP
6144:evPCw6J8iuaSJN0pAUBDcwH+H/QN28oXJypAcFk08lvmdf:evPCw6JbuaSJqpAUn+4NHoXEXClK
Malware Config
Signatures
Files
-
fc3300390207a3fbdc9e57a62b366fee110f27ad7c6ee179b7e2b11f2c3dbbb7.dll windows x86
9d66a6dee402b7091d9596d85278649f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
LoadMenuA
CloseWindow
GetMenu
DialogBoxParamW
CreateIcon
GetFocus
DialogBoxParamA
IsMenu
DrawIconEx
DrawIcon
DrawTextA
IsWindow
CopyImage
CopyIcon
AlignRects
GetCursor
EndDialog
GetWindow
CalcMenuBar
kernel32
ReadConsoleA
GetCPInfo
CopyFileA
FindFirstFileA
CopyFileW
GetConsoleMode
GetComputerNameA
CreateDirectoryA
CreateProcessA
GetStdHandle
ReadConsoleW
CopyFileExA
DeleteAtom
ReadFile
GetFileSize
ReadConsoleW
CopyFileA
GetStdHandle
GetFileTime
FindFirstFileA
CreateProcessA
DeleteFileA
GetCPInfo
OpenFileMappingA
Sleep
GetCommandLineA
FindAtomA
DeleteFileW
ReadFile
FindFirstFileA
OpenFile
FindAtomA
GlobalFree
ReadConsoleA
GetCommandLineA
CopyFileA
CopyFileExA
ExitThread
advapi32
RegDeleteValueW
RegQueryValueExA
RegQueryValueExW
RegDeleteValueA
RegEnumKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegCloseKey
RegCreateKeyW
RegOpenKeyA
RegGetKeySecurity
RegQueryInfoKeyW
RegEnumKeyW
RegEnumValueA
RegCreateKeyExA
RegEnumKeyExW
RegOpenKeyW
RegGetKeySecurity
RegQueryValueExA
RegDeleteKeyW
RegQueryValueA
RegCloseKey
RegFlushKey
RegReplaceKeyA
RegDeleteValueW
RegDeleteValueA
RegOpenKeyA
RegCreateKeyExW
RegDeleteValueA
RegFlushKey
RegEnumKeyA
RegEnumKeyExA
RegOpenKeyA
RegReplaceKeyA
RegEnumKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegCreateKeyExA
RegEnumValueA
RegEnumValueA
RegDeleteKeyA
RegQueryValueExA
RegFlushKey
RegQueryValueW
RegDeleteValueA
RegDeleteValueW
RegReplaceKeyW
RegOpenKeyExA
RegEnumKeyA
RegCreateKeyExW
RegDeleteKeyW
RegGetKeySecurity
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegReplaceKeyW
RegOpenKeyExA
RegDeleteValueA
RegQueryValueW
RegQueryInfoKeyW
RegDeleteKeyA
RegQueryInfoKeyA
RegOpenKeyA
RegEnumKeyExA
RegCreateKeyW
RegEnumValueW
RegCloseKey
RegQueryValueW
RegEnumKeyExA
RegQueryValueExA
RegReplaceKeyW
RegLoadKeyA
RegDeleteKeyA
RegQueryValueExW
RegCreateKeyExA
RegFlushKey
RegCreateKeyExW
RegDeleteValueA
RegEnumValueA
RegGetKeySecurity
RegCreateKeyExW
RegCreateKeyW
RegOpenKeyA
RegOpenKeyW
RegEnumKeyExW
RegOpenKeyExA
RegDeleteValueW
RegFlushKey
RegQueryValueW
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExW
RegQueryInfoKeyA
RegEnumKeyExA
Sections
.tls Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.b7660 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 999B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ