���ptyBoxFromData@12
Static task
static1
Behavioral task
behavioral1
Sample
16a97c4ec09ca94e4002018f1327e5071ed796220d3fc0b2b639cab3d50c92ee.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
16a97c4ec09ca94e4002018f1327e5071ed796220d3fc0b2b639cab3d50c92ee.dll
Resource
win10v2004-20220812-en
General
-
Target
16a97c4ec09ca94e4002018f1327e5071ed796220d3fc0b2b639cab3d50c92ee
-
Size
118KB
-
MD5
2ddf897cef87c5f86829ca7e7fd54284
-
SHA1
61bf8b123e087e3d80c9b5c3853ac8ccdcbea7db
-
SHA256
16a97c4ec09ca94e4002018f1327e5071ed796220d3fc0b2b639cab3d50c92ee
-
SHA512
3474424de6c997cac5b525f13913a9e755427ad8aa2d57ea01a1bf84a3bacb675ed486dda4e5ff4ab69d5bf34ba7673a068c913d46ae036007891056a07f1742
-
SSDEEP
3072:NEsmhO7MesaxHAL39D1SW6xiyx1p1ozoTSewK3hXAIgSrKQ:NQO7Meg7SW6IyxL1Y9etRlgc
Malware Config
Signatures
Files
-
16a97c4ec09ca94e4002018f1327e5071ed796220d3fc0b2b639cab3d50c92ee.dll windows x86
40b9593727b71108fce6ea51b683dc35
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ExitWindowsEx
DrawFrameControl
GetLastActivePopup
IsRectEmpty
DrawMenuBar
DrawIconEx
InsertMenuW
DefDlgProcW
AllowSetForegroundWindow
DrawIcon
GetWindowPlacement
MapVirtualKeyExW
GetClassInfoExA
keybd_event
CharNextExA
HideCaret
RedrawWindow
DefDlgProcA
DrawStateW
SendInput
GetSubMenu
DrawFocusRect
GetSysColorBrush
GetWindowDC
GetMenuItemInfoW
GetMessageTime
GetMonitorInfoW
IsWindowVisible
UpdateWindow
GetMenuStringA
SetWindowLongW
CharPrevA
ClipCursor
LoadBitmapA
SetCaretPos
SetWindowTextW
PostThreadMessageA
SetWindowPos
DestroyCaret
SendMessageTimeoutW
GetDCEx
GetMenuItemCount
CreateIconIndirect
GetWindowLongA
GetWindow
SetLastErrorEx
wsprintfW
SetMenuDefaultItem
wvsprintfA
SetFocus
CheckMenuRadioItem
LoadCursorW
GetClipCursor
SetMenuItemInfoW
DrawTextA
RemovePropW
kernel32
lstrcpynA
FileTimeToLocalFileTime
GetLocalTime
SearchPathA
RegisterWaitForSingleObject
SetFilePointer
GetCPInfo
RaiseException
GetPriorityClass
FindResourceExW
lstrlenA
GetTempPathW
UnmapViewOfFile
CreateEventW
lstrcatW
CreateMutexW
GetThreadTimes
FindResourceW
GetBinaryTypeA
LoadLibraryExA
CreateDirectoryW
GlobalReAlloc
CopyFileA
FormatMessageA
CopyFileExA
GetThreadLocale
CreateThread
GetVersionExW
GetCommConfig
SetSystemTimeAdjustment
ClearCommBreak
CreateNamedPipeA
ConnectNamedPipe
GetTempFileNameW
lstrcmpiW
SetFileAttributesA
psapi
GetWsChanges
rpcrt4
I_RpcClearMutex
crypt32
CertGetIntendedKeyUsage
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xor33 Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xor44 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xor55 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xor11 Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xor22 Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erefdf Size: - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ