Static task
static1
Behavioral task
behavioral1
Sample
5c30867e49e1350f29abaf39bfc847aa7fed196c250b82125f71b7e0e06211df.dll
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5c30867e49e1350f29abaf39bfc847aa7fed196c250b82125f71b7e0e06211df.dll
Resource
win10v2004-20220721-en
General
-
Target
5c30867e49e1350f29abaf39bfc847aa7fed196c250b82125f71b7e0e06211df
-
Size
146KB
-
MD5
2789d8ecc091ca006e426a9db9361d7d
-
SHA1
9c33b1d66a6000119348cf61fa774d7769449456
-
SHA256
5c30867e49e1350f29abaf39bfc847aa7fed196c250b82125f71b7e0e06211df
-
SHA512
a782b451ff592be6cb78af5dafbdb41d172e5f1422a5b63943dd03782d8c31c746429ddfaa61b54460effc0a14d544fae72ebb35734afa69c71634310046ff4b
-
SSDEEP
3072:bSDKVNmXfa6M8WOzZkqZZAWOPYfSFkx1G:uDWyad8WA7FOcSA
Malware Config
Signatures
Files
-
5c30867e49e1350f29abaf39bfc847aa7fed196c250b82125f71b7e0e06211df.dll windows x86
72140ebad01127e8010f15e6090e781b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleW
user32
GetTopWindow
DispatchMessageW
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
IsChild
WinHelpW
SendDlgItemMessageA
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetWindowThreadProcessId
GetAsyncKeyState
MapDialogRect
CharNextW
PostQuitMessage
TranslateMessage
GetMessageW
SetWindowContextHelpId
CharUpperW
GetSysColorBrush
UnregisterClassW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowTextLengthW
GetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetDlgCtrlID
SetCursor
AttachThreadInput
GetScrollPos
DestroyWindow
GetMenu
GetSubMenu
GetMenuItemInfoW
ScreenToClient
DrawEdge
DrawFocusRect
SetParent
ValidateRect
DestroyIcon
EnableScrollBar
SetWindowTextW
EnumChildWindows
GetFocus
SetFocus
GetScrollInfo
SetScrollInfo
ScrollWindow
MoveWindow
ShowWindow
DrawIconEx
GetSysColor
IsWindowEnabled
DrawTextW
GetActiveWindow
GetParent
GetCapture
WindowFromPoint
ClientToScreen
SystemParametersInfoW
GetClassInfoExW
RegisterClassExW
DefWindowProcW
BeginPaint
EndPaint
SetWindowPos
FillRect
wsprintfW
GetClassNameW
CreateWindowExW
SetWindowLongW
GetWindowLongW
IsWindow
ReleaseCapture
CreatePopupMenu
InsertMenuItemW
CheckMenuItem
GetCursorPos
TrackPopupMenuEx
GetSystemMetrics
PostThreadMessageW
LoadImageW
EnableMenuItem
SetForegroundWindow
SetCapture
IsWindowVisible
UpdateWindow
ReleaseDC
GetDC
GetClientRect
GetWindowRect
IsIconic
DestroyMenu
DrawIcon
LoadBitmapW
MessageBoxW
RegisterWindowMessageW
LoadIconW
GetDlgItem
KillTimer
SetTimer
RedrawWindow
PostMessageW
LoadCursorW
EnableWindow
UnregisterClassA
GetClassInfoW
UnhookWindowsHookEx
InvalidateRect
SendMessageW
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetScrollRange
FindWindowW
SetScrollPos
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
SetWindowPlacement
GetDesktopWindow
CallWindowProcW
BringWindowToTop
PaintDesktop
InSendMessage
GetQueueStatus
gdi32
CreateMetaFileW
GetROP2
GetStockObject
CloseEnhMetaFile
EndPage
advapi32
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyA
ole32
CoRegisterMessageFilter
Sections
.pop Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ