Static task
static1
Behavioral task
behavioral1
Sample
8aed7783fe3ff0dfe80689a13fbc54a1226dc09e81f9c24141fb6bece9dae77f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8aed7783fe3ff0dfe80689a13fbc54a1226dc09e81f9c24141fb6bece9dae77f.dll
Resource
win10v2004-20220901-en
General
-
Target
8aed7783fe3ff0dfe80689a13fbc54a1226dc09e81f9c24141fb6bece9dae77f
-
Size
288KB
-
MD5
10e590febe70b54b1fc3b872bbe78439
-
SHA1
b1af9b84acd6be826c3ade69322f3fc45f60e6c3
-
SHA256
8aed7783fe3ff0dfe80689a13fbc54a1226dc09e81f9c24141fb6bece9dae77f
-
SHA512
cbb9344346185047bbbf290ae2cc0238c4bbe87f4994fc322e1489cf3c9bcb12dd1882a09752e60ef4c9e9061f0ef2ca68afee1aa9e24a1df825ec9a35abdbae
-
SSDEEP
6144:XDAYjr/yupcWvyEOS2vjSvjIrkdDdpJaATsk52cmUcJHyJLpNu:XDA2ryup/vbOS2rSr1dx3wkL8JSJLpN
Malware Config
Signatures
Files
-
8aed7783fe3ff0dfe80689a13fbc54a1226dc09e81f9c24141fb6bece9dae77f.dll windows x86
bccc475118279039aa03aa62265a277a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteValueA
SHQueryValueExA
SHSetValueA
SHDeleteKeyA
PathIsContentTypeA
SHStrDupA
SHGetValueA
SHEnumValueA
PathFileExistsA
PathIsDirectoryA
shell32
Shell_NotifyIconA
msvcrt
sqrt
kernel32
MoveFileA
LoadLibraryA
lstrcpyA
SizeofResource
VirtualQuery
VirtualFree
lstrcpynA
ExitThread
LoadLibraryExA
GetLastError
lstrcmpiA
WaitForSingleObject
GetCommandLineA
GetModuleHandleW
IsBadReadPtr
WideCharToMultiByte
lstrcatA
lstrcmpA
MoveFileExA
HeapDestroy
GetModuleHandleA
ExitProcess
LocalReAlloc
GetACP
WriteFile
LocalAlloc
VirtualAlloc
GetProcAddress
lstrlenA
VirtualAllocEx
LocalFree
MulDiv
oleaut32
SafeArrayUnaccessData
SafeArrayPtrOfIndex
gdi32
CreateDIBitmap
CreatePenIndirect
CreateFontIndirectA
GetBitmapBits
CreatePalette
advapi32
RegOpenKeyExA
GetUserNameA
RegLoadKeyA
version
VerQueryValueA
GetFileVersionInfoSizeA
VerFindFileA
comctl32
ImageList_Create
ImageList_Destroy
ImageList_Draw
ImageList_Remove
ImageList_Write
ImageList_Read
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Add
ImageList_DragShowNolock
user32
OffsetRect
SendMessageA
LoadIconA
RemoveMenu
RegisterClipboardFormatA
RemovePropA
MessageBoxA
LoadBitmapA
SendMessageW
LoadKeyboardLayoutA
PeekMessageW
ReleaseDC
ReleaseCapture
RegisterClassA
LoadStringA
MapVirtualKeyA
MessageBeep
PtInRect
SetActiveWindow
PostQuitMessage
MapWindowPoints
ScrollWindow
OemToCharA
ScreenToClient
PostMessageA
LoadCursorA
RedrawWindow
PeekMessageA
RegisterWindowMessageA
OpenClipboard
comdlg32
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
FindTextA
Sections
CODE Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 442B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc2 Size: 1024B - Virtual size: 594B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 1024B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc1 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc8 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ