Static task
static1
Behavioral task
behavioral1
Sample
d304e06005e8fdbd2297617fa1180fdaeb73545aeeb782b29285db84b5d507ca.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d304e06005e8fdbd2297617fa1180fdaeb73545aeeb782b29285db84b5d507ca.dll
Resource
win10v2004-20240426-en
General
-
Target
d304e06005e8fdbd2297617fa1180fdaeb73545aeeb782b29285db84b5d507ca
-
Size
391KB
-
MD5
59e9ba4a25d2908226d618e3e682499b
-
SHA1
63306ea4f7562963513848d1c2843e56dae3a167
-
SHA256
d304e06005e8fdbd2297617fa1180fdaeb73545aeeb782b29285db84b5d507ca
-
SHA512
d33e59ccc2dfbc3bcfcd943548743dd498d69b71c4a9ec017cd4fb35cd7a3f7fe4b5a7b5db415c93eae106f2bf04000d16ca8a30580e80c00929b7d8bf352e32
-
SSDEEP
3072:3EpnBl4p9ISxQUoyHrpqeTGZcqX7msgsQI33kyQ:3249ISy0Hr8eGHl8yQ
Malware Config
Signatures
Files
-
d304e06005e8fdbd2297617fa1180fdaeb73545aeeb782b29285db84b5d507ca.dll windows:6 windows x86 arch:x86
8c5e7350e83c210099e5e2ca5fce0a47
Code Sign
4e:37:5e:3f:8a:14:c4:7e:ba:e7:21:fe:37:14:8f:96Certificate
IssuerCN=AweAPCPOptima,1.2.840.113549.1.9.1=#0c186469676974616c40617765617063706f7074696d612e7573Not Before08/11/2022, 00:00Not After08/11/2023, 23:59SubjectCN=AweAPCPOptima,1.2.840.113549.1.9.1=#0c186469676974616c40617765617063706f7074696d612e7573Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapAlloc
HeapFree
GetProcessHeap
WriteFile
WideCharToMultiByte
Sleep
InitializeCriticalSectionEx
GetLastError
HeapSize
DecodePointer
DeleteCriticalSection
GetCurrentThreadId
CloseHandle
GetThreadContext
VirtualQuery
GetCurrentProcess
VirtualFree
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
EnterCriticalSection
OpenThread
GetSystemInfo
GetThreadPriority
GetCurrentProcessId
SuspendThread
ResumeThread
CreateFileW
LCMapStringW
HeapReAlloc
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetStringTypeW
RtlUnwind
SetFilePointerEx
SetStdHandle
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
EncodePointer
GetSystemTimeAsFileTime
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
MultiByteToWideChar
OutputDebugStringW
LoadLibraryExW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
user32
GetUpdatedClipboardFormats
DeregisterShellHookWindow
GetTopWindow
DialogBoxIndirectParamA
advapi32
GetUserNameA
RegOpenCurrentUser
ObjectCloseAuditAlarmW
RegOpenUserClassesRoot
SetSecurityDescriptorGroup
IsWellKnownSid
EqualDomainSid
shlwapi
SHCopyKeyW
SHAutoComplete
PathAppendA
PathCompactPathExA
SHRegQueryUSValueW
Exports
Exports
Mon
_HookBringWindowToTop@4
_HookSetActiveWindow@4
_HookSetForegroundWindow@4
_HookSetWindowPos@28
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 154KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ