Static task
static1
Behavioral task
behavioral1
Sample
5938ce0c40dffa22fb032cc79f7eb6e2c0d6827a9b79cc634415fd962a470626.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5938ce0c40dffa22fb032cc79f7eb6e2c0d6827a9b79cc634415fd962a470626.dll
Resource
win10v2004-20240412-en
General
-
Target
5938ce0c40dffa22fb032cc79f7eb6e2c0d6827a9b79cc634415fd962a470626
-
Size
467KB
-
MD5
76fed56bd0ced9b4c33a6ecb7e0f4e27
-
SHA1
092fa0ff00f85284fa3ab4e7128675aad7791bfd
-
SHA256
5938ce0c40dffa22fb032cc79f7eb6e2c0d6827a9b79cc634415fd962a470626
-
SHA512
66dfb4dd1fb2570789c0d3fa697feeb838b3127228e52a393fc9a2f2932ebb4bdaaffa8af2487698df893b61e7b89c45dbc4f374c04cc2aac34c0632aa6287f6
-
SSDEEP
6144:3Ie+e21T0Q8yHJsTtfMZK8Qzba39n6GoOl:3ILe3UHhQzbatRl
Malware Config
Signatures
Files
-
5938ce0c40dffa22fb032cc79f7eb6e2c0d6827a9b79cc634415fd962a470626.dll windows:6 windows x64 arch:x64
299f85db0d06ec4914b71b02d7b1c8e7
Code Sign
6e:5f:64:b4:93:c5:0e:be:48:e9:ca:74:3b:62:df:53Certificate
IssuerCN=TickTackSpeedupCraft,1.2.840.113549.1.9.1=#0c1d68656c70407469636b7461636b7370656564757063726166742e6f7267Not Before02/06/2022, 00:00Not After02/06/2023, 23:59SubjectCN=TickTackSpeedupCraft,1.2.840.113549.1.9.1=#0c1d68656c70407469636b7461636b7370656564757063726166742e6f7267Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
FreeLibrary
GetModuleHandleA
GetProcAddress
K32GetModuleBaseNameW
K32GetModuleFileNameExA
K32GetDeviceDriverFileNameW
SetCurrentDirectoryW
FindFirstChangeNotificationW
DecodePointer
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
SetThreadStackGuarantee
GetSystemTimeAdjustment
DeleteBoundaryDescriptor
SetFileCompletionNotificationModes
GetProfileSectionW
MapViewOfFileExNuma
WideCharToMultiByte
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OutputDebugStringW
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteConsoleW
SetFilePointerEx
SetStdHandle
LoadLibraryExW
SetConsoleCtrlHandler
CreateSemaphoreW
GetModuleHandleW
GetTickCount
EnterCriticalSection
LeaveCriticalSection
EncodePointer
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
FatalAppExitA
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThread
GetStdHandle
GetModuleFileNameW
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateFileW
user32
UnregisterClassA
ole32
CoGetInterfaceAndReleaseStream
shlwapi
StrCmpNW
PathAddExtensionA
PathIsPrefixW
PathIsRootW
SHDeleteEmptyKeyW
SHRegOpenUSKeyW
SHCopyKeyA
oledlg
OleUIConvertW
OleUIPromptUserW
OleUIBusyW
ord3
ord1
Exports
Exports
g5b5az
io92jm
jpmu4o
ml0cib
wyw910
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ