Static task
static1
Behavioral task
behavioral1
Sample
dcf26d0736a095271fe6a83a48f48fa67821c9b5.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dcf26d0736a095271fe6a83a48f48fa67821c9b5.dll
Resource
win10v2004-20221111-en
General
-
Target
dcf26d0736a095271fe6a83a48f48fa67821c9b5
-
Size
1.3MB
-
MD5
047c2c2ff58e1afa71473ba3addfcc19
-
SHA1
dcf26d0736a095271fe6a83a48f48fa67821c9b5
-
SHA256
21d46c7438ed4f0f04de9455e49f53a96480e6a9850e71fa954f19934e0c2ba7
-
SHA512
ec15f5e2bee7b3af2c16d066b5687c4ac2d28327f162185c7a7a6a72842212fd1121a0f29f2ffd571d5c96634b0fa21808929e6f16ddd41f314fa44a5157c1ff
-
SSDEEP
24576:lv/tdRXhovLSXG0dacmW2ajzHtL8D11Jg5T/McYZ7UO3sS3inDdgj:5tuLSfaaFL8D11Jgp3BO3sVDI
Malware Config
Signatures
Files
-
dcf26d0736a095271fe6a83a48f48fa67821c9b5.dll windows x64
f1f05867c4b61080ff93e14774ae9ef7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wininet
InternetOpenUrlW
InternetOpenW
InternetCheckConnectionA
InternetReadFile
InternetCloseHandle
winmm
timeGetTime
kernel32
FlsFree
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
SwitchToFiber
GetTickCount64
Sleep
MoveFileExA
DisableThreadLibraryCalls
CreateThread
FreeLibraryAndExitThread
GetModuleFileNameA
SetConsoleTextAttribute
SetConsoleTitleA
GetStdHandle
SetConsoleMode
GetLastError
AllocConsole
ConvertThreadToFiber
CreateFiber
HeapFree
InitializeCriticalSectionEx
HeapSize
HeapReAlloc
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
QueryPerformanceCounter
SizeofResource
FindResourceA
UnmapViewOfFile
CreateFileA
LockResource
CloseHandle
LoadResource
CreateFileMappingW
MapViewOfFile
FreeConsole
GetConsoleWindow
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetThreadContext
GetProcAddress
GetCurrentProcessId
FlushInstructionCache
SetThreadContext
OpenThread
FormatMessageA
LocalFree
GetLocaleInfoEx
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFileInformationByHandle
AreFileApisANSI
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceFrequency
WaitForSingleObjectEx
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
SetEndOfFile
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
OutputDebugStringW
RaiseException
GetACP
IsValidCodePage
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
ReadConsoleW
ReadFile
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
ExitThread
GetModuleHandleExW
ExitProcess
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameW
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
user32
GetForegroundWindow
MessageBoxA
FindWindowA
GetAsyncKeyState
ShowWindow
Sections
.text Size: 878KB - Virtual size: 878KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ