Helpmade
Static task
static1
Behavioral task
behavioral1
Sample
96691a5722177bd3b92d898458b51bf624a6fd3c83ba03f6c1a9c2088171931e.dll
Resource
win7-20220901-en
General
-
Target
96691a5722177bd3b92d898458b51bf624a6fd3c83ba03f6c1a9c2088171931e
-
Size
398KB
-
MD5
a2f914433461b45fc5505e9f89683625
-
SHA1
a004c119c923990c3cc93c4eff5dcf4a7cf45bf6
-
SHA256
96691a5722177bd3b92d898458b51bf624a6fd3c83ba03f6c1a9c2088171931e
-
SHA512
e0bed07bb6f97c0e685ece31654c2bb147d78a11530740451376b267738e6af430f13c5e5b50d96ec4ba81d2a9c770a2f085c3b5ba38ec6078eb4a0b2e196ba8
-
SSDEEP
12288:skELFg2bL3yXTmLwkHIvJuXK1+OB0wmylK+IUGJH+O:sxy2wm9R+O
Malware Config
Signatures
Files
-
96691a5722177bd3b92d898458b51bf624a6fd3c83ba03f6c1a9c2088171931e.dll windows x86
0310ca8e02fde841c64ac5b0e3e89db3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
VirtualProtect
CreateThread
Sleep
CreateSemaphoreA
GetEnvironmentVariableA
MoveFileA
QueryPerformanceFrequency
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
DeleteCriticalSection
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetFileType
GetStartupInfoW
ReadFile
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
LoadLibraryExW
OutputDebugStringW
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
WriteConsoleW
CreateFileW
SetEndOfFile
Exports
Exports
Sections
.text Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ