nopewvs
Static task
static1
Behavioral task
behavioral1
Sample
fbe225cc91c7932c9dce326d83cecd8d0ffe41d9a98903f828eb30e7d427434c.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fbe225cc91c7932c9dce326d83cecd8d0ffe41d9a98903f828eb30e7d427434c.dll
Resource
win10v2004-20230221-en
General
-
Target
fbe225cc91c7932c9dce326d83cecd8d0ffe41d9a98903f828eb30e7d427434c.dll
-
Size
307KB
-
MD5
5d974d857b0295216a0699920eed6b8e
-
SHA1
5b1ae8d2319c8caddcefb21655fa697a3274a8d4
-
SHA256
fbe225cc91c7932c9dce326d83cecd8d0ffe41d9a98903f828eb30e7d427434c
-
SHA512
bb462f0a5783d2907dd513aefe35756ec686269c303cc9ef46930dc04f3f457ee10747c0ba86a6e8a40d48c120bb88b9db880de6da71f07ef0f8eec248f70c04
-
SSDEEP
6144:eDKOpkfAEYEO9D5QGiiP55UL/ypV2Mf9KusAOegao82Y:eIk9tQGzP8LuEz22Y
Malware Config
Signatures
Files
-
fbe225cc91c7932c9dce326d83cecd8d0ffe41d9a98903f828eb30e7d427434c.dll.dll windows x86
ed32a9ec7cdf7951edc735f8098a8fcf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSectionEx
DeleteCriticalSection
GetProcAddress
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
GetTempPathW
CreateDirectoryW
GetModuleHandleExW
GetModuleFileNameW
CloseHandle
GetLogicalDriveStringsW
GetWindowsDirectoryW
GetLastError
WriteConsoleW
CreateFileW
SetStdHandle
HeapSize
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetEndOfFile
RaiseException
EnterCriticalSection
LeaveCriticalSection
LocalFree
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwind
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
HeapFree
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapAlloc
ReadFile
ReadConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
HeapReAlloc
ole32
CoUninitialize
oleaut32
SysAllocString
SysFreeString
VariantClear
VariantInit
wininet
InternetCloseHandle
InternetReadFile
urlmon
ObtainUserAgentString
Exports
Exports
Sections
.text Size: 219KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ