Static task
static1
Behavioral task
behavioral1
Sample
eff889872cfe83efcdc133b9c1926e1e2b7c7624f65e8829716e0eba0fca4b43.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eff889872cfe83efcdc133b9c1926e1e2b7c7624f65e8829716e0eba0fca4b43.dll
Resource
win10v2004-20220812-en
General
-
Target
eff889872cfe83efcdc133b9c1926e1e2b7c7624f65e8829716e0eba0fca4b43
-
Size
303KB
-
MD5
0ec0406c732ea660abc73de15b74ba74
-
SHA1
21285ca36a6bb5d1dc488c8b506327d1ba0e9c48
-
SHA256
eff889872cfe83efcdc133b9c1926e1e2b7c7624f65e8829716e0eba0fca4b43
-
SHA512
f967dbc69950df0622ba30ed139f0b4d36b96266fdf02bbdbad077bf8da1b72424ce0b7ca1071b0ec281a15e0880a034187fcb8eab5b03900b826653e0fc3a5b
-
SSDEEP
6144:I6MMYx5EOhcoh//oct0pf1XB9FVTqmCYkk3jmsy6LBAOieSqs:I3bhcoRAct0prFTHpTisHr0q
Malware Config
Signatures
Files
-
eff889872cfe83efcdc133b9c1926e1e2b7c7624f65e8829716e0eba0fca4b43.dll windows x86
a54565fd03aff54df94deececbe2273e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
InflateRect
ShowWindow
GetMenu
FillRect
GetFocus
OemToCharA
SetWindowLongW
DrawEdge
MapVirtualKeyA
CreatePopupMenu
GetCursor
UnregisterClassA
SetClipboardData
GetDlgItem
IsWindowUnicode
EnableMenuItem
IsWindow
SetFocus
GetActiveWindow
CloseClipboard
InsertMenuItemA
PostMessageA
GetScrollRange
SendMessageA
GetSystemMetrics
GetKeyboardState
DefFrameProcA
EnableScrollBar
DestroyWindow
SetCursor
MessageBeep
GetCursorPos
ReleaseDC
DrawFrameControl
GetParent
PeekMessageA
GetCapture
GetLastActivePopup
GetDC
GetForegroundWindow
SetTimer
SetWindowTextA
TrackPopupMenu
PtInRect
IsWindowEnabled
GetClassInfoA
GetClipboardData
SetForegroundWindow
GetSubMenu
CharToOemA
IsIconic
GetKeyState
EmptyClipboard
UnhookWindowsHookEx
RemoveMenu
SetClassLongA
TranslateMessage
GetDCEx
DestroyMenu
FindWindowA
GetMessagePos
DefMDIChildProcA
KillTimer
GetKeyboardLayoutList
LoadBitmapA
CreateWindowExA
SetScrollInfo
GetMenuItemID
CharNextA
ScreenToClient
SetScrollRange
gdi32
GetDIBColorTable
CreatePalette
kernel32
GetCommandLineW
VirtualAllocEx
GlobalAlloc
lstrlenA
lstrlenW
LoadLibraryA
GetCommandLineA
ExitProcess
ExitThread
GetACP
GetProcAddress
IsBadReadPtr
GetModuleHandleA
comdlg32
FindTextA
shlwapi
PathIsContentTypeA
SHDeleteValueA
SHQueryInfoKeyA
oleaut32
SafeArrayPtrOfIndex
ole32
CoTaskMemFree
StgCreateDocfileOnILockBytes
CoCreateFreeThreadedMarshaler
CLSIDFromProgID
CoGetContextToken
StgOpenStorage
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
advapi32
RegDeleteValueA
RegLoadKeyA
Sections
CODE Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC1 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC6 Size: 1024B - Virtual size: 582B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC2 Size: 1KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC8 Size: 1024B - Virtual size: 943B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC5 Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC4 Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ