Static task
static1
Behavioral task
behavioral1
Sample
c5fcbee8ea15e192e628964914a9fdb71cc895880606ceeb54ca25648c9c783e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c5fcbee8ea15e192e628964914a9fdb71cc895880606ceeb54ca25648c9c783e.dll
Resource
win10v2004-20221111-en
General
-
Target
c5fcbee8ea15e192e628964914a9fdb71cc895880606ceeb54ca25648c9c783e
-
Size
137KB
-
MD5
b30d5832d4c4fe2fba3eaa3bc34bf686
-
SHA1
f436cb64fd71b8ddfba8a6f169e796a97445700b
-
SHA256
c5fcbee8ea15e192e628964914a9fdb71cc895880606ceeb54ca25648c9c783e
-
SHA512
48b9b54f0f2aa199a59daafe55dec0fc2f320484ca0f81f97f29a9926c5774d6570d0a09f8bc0d4ff0e0c5ed297272124f542f15de10bd241f4d76dee9eb57db
-
SSDEEP
1536:tJqwA3b+YtiBq62aNGCw6NOg9a2iDfdGMjSfxx8bBtoQgPxuHFDJeoT4cFWyCFYn:HYt+Lt9I1GMjS5LQ2EHFc2UFY/r9HKe
Malware Config
Signatures
Files
-
c5fcbee8ea15e192e628964914a9fdb71cc895880606ceeb54ca25648c9c783e.dll windows x86
cbc143fad76632fde4d30639cde22591
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegReplaceKeyW
RegQueryValueW
RegEnumKeyExA
RegOpenKeyW
RegGetKeySecurity
RegFlushKey
RegEnumKeyA
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExA
RegQueryValueA
RegEnumValueW
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExW
RegOpenKeyW
RegCreateKeyExA
RegQueryValueW
RegGetKeySecurity
RegCreateKeyW
RegDeleteValueA
RegEnumValueA
RegReplaceKeyA
RegQueryInfoKeyA
RegEnumKeyW
RegCreateKeyExW
RegOpenKeyA
RegDeleteKeyW
RegFlushKey
RegQueryValueW
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteValueA
RegLoadKeyW
RegCreateKeyExA
RegGetKeySecurity
RegOpenKeyA
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyW
RegDeleteKeyA
RegCreateKeyW
RegEnumValueW
RegLoadKeyA
RegEnumKeyA
RegReplaceKeyW
RegQueryValueExW
RegDeleteValueA
RegEnumKeyExA
RegQueryValueW
RegDeleteValueW
RegReplaceKeyA
RegQueryValueExA
RegDeleteKeyW
RegLoadKeyW
RegQueryInfoKeyW
RegOpenKeyW
RegQueryValueW
RegFlushKey
RegReplaceKeyA
RegLoadKeyW
RegDeleteKeyW
RegEnumKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyA
RegOpenKeyW
user32
CreateIcon
CopyImage
GetWindow
IsMenu
CalcMenuBar
GetMenu
GetWindowTextA
IsWindow
GetCursor
EndDialog
GetDlgItem
AppendMenuA
LoadCursorA
LoadMenuA
InsertMenuA
AppendMenuA
DrawIconEx
GetWindowTextA
GetWindow
LoadMenuA
DrawTextA
DialogBoxParamA
GetDlgItem
BlockInput
CalcMenuBar
CreateIcon
GetMenu
EndDialog
DrawIcon
DialogBoxParamW
CalcMenuBar
CopyRect
DrawTextA
GetCursor
CopyIcon
IsMenu
AppendMenuW
AppendMenuA
DrawTextW
LoadMenuA
GetFocus
BlockInput
InsertMenuA
DrawIconEx
LoadCursorA
CloseWindow
CreateIcon
DialogBoxParamW
LoadMenuA
GetWindowTextA
InsertMenuA
DialogBoxParamA
CopyRect
CopyIcon
IsMenu
GetCursor
CopyImage
DrawTextA
GetWindow
CopyImage
DrawIconEx
CreateIcon
DialogBoxParamA
AppendMenuA
BlockInput
IsMenu
GetFocus
DrawTextA
CloseWindow
IsWindow
GetWindowTextA
CopyRect
EndDialog
AlignRects
InsertMenuA
GetMenu
GetCursor
CopyIcon
kernel32
GetComputerNameA
FindAtomA
DeleteFileA
FindFirstFileA
DeleteAtom
ReadConsoleA
DeleteFileW
CopyFileW
WriteFile
ExitThread
OpenFile
CopyFileExW
Sleep
GetFileTime
GetStdHandle
Sections
.tls Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.b3276 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 763B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ