?SDOisioKJS@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
27969d40a785488f63cb5e83e05241968e363caaf3f7d5b0084605ab7981f4bc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27969d40a785488f63cb5e83e05241968e363caaf3f7d5b0084605ab7981f4bc.dll
Resource
win10v2004-20220901-en
General
-
Target
27969d40a785488f63cb5e83e05241968e363caaf3f7d5b0084605ab7981f4bc
-
Size
221KB
-
MD5
9362dee8600160f02441cce157e77b49
-
SHA1
48381a530f40bbdb46aa069b5446c27505d2cc0a
-
SHA256
27969d40a785488f63cb5e83e05241968e363caaf3f7d5b0084605ab7981f4bc
-
SHA512
fe1f645069bf73441ec8e23098a92d50ef000836b5148f689073d4cf5804e39b1b9583936f45c385df1dbb3320c9fc174bb8a9c839f52f5858c02396836869dc
-
SSDEEP
3072:Zm5z5BQLhYNojhftye3CGRmDKRfJrcEwvIIRYAEuhmqA8l2s5AOgVYo8ugfkcA0K:ZThYKNtSGRm+95fIzrI9/7RcA0RA
Malware Config
Signatures
Files
-
27969d40a785488f63cb5e83e05241968e363caaf3f7d5b0084605ab7981f4bc.dll windows x86
055196ba524f8a40d41d0fc3b9e32fe4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
msvcrt
memcpy
gdi32
GetLayout
ExtTextOutA
EndDoc
SetWindowOrgEx
SetStretchBltMode
GetFontData
DeleteObject
StartPage
BeginPath
LineDDA
GetDIBColorTable
RemoveFontResourceW
ScaleViewportExtEx
CreateICW
GetTextExtentPointW
RoundRect
GetTextExtentExPointW
user32
GetMenuItemID
GetDialogBaseUnits
InsertMenuA
CreateCaret
GetWindow
MonitorFromPoint
IsRectEmpty
LoadMenuA
DeleteMenu
GetSystemMenu
VkKeyScanW
GetScrollRange
InvalidateRect
GetAltTabInfoW
GetMenuStringA
MonitorFromRect
GetUpdateRect
IntersectRect
RegisterClassExW
SendMessageA
SetForegroundWindow
SetScrollInfo
wsprintfW
GetClipCursor
SetClassLongW
MapDialogRect
GetSysColorBrush
SendMessageTimeoutA
SetWindowTextW
GetDCEx
GetCaretPos
ModifyMenuW
DestroyCursor
GetWindowTextA
CopyImage
PeekMessageA
kernel32
IsBadReadPtr
LoadLibraryExW
EscapeCommFunction
GetExitCodeThread
GetFileType
LCMapStringA
GetCompressedFileSizeW
OpenSemaphoreW
FindResourceA
lstrlenW
GetThreadContext
SetCommTimeouts
VerSetConditionMask
lstrcpyA
FindNextChangeNotification
SetTimerQueueTimer
IsValidLocale
CancelWaitableTimer
ole32
OleIsRunning
Exports
Exports
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dat_0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_1 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_2 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_3 Size: 512B - Virtual size: 313B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_4 Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ