Static task
static1
Behavioral task
behavioral1
Sample
01721815e04998868f592bf8402d1096f28524b8017744ace43498057f7b462f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01721815e04998868f592bf8402d1096f28524b8017744ace43498057f7b462f.dll
Resource
win10v2004-20220901-en
General
-
Target
01721815e04998868f592bf8402d1096f28524b8017744ace43498057f7b462f
-
Size
356KB
-
MD5
61dfb017bf39463fb17948ce9d14b5a5
-
SHA1
50d7bdb7022c4496c47d51f3b9b88ddb3d4aa5be
-
SHA256
01721815e04998868f592bf8402d1096f28524b8017744ace43498057f7b462f
-
SHA512
dc2c6f60cf0b301d1a291a990ffbd99dcf1b1b81b9c791f0faeb435a1400f6a548add9b266b0172818c9d75f6aa8f4d907eb8082d6df9b58f75d13d1a5f1805e
-
SSDEEP
6144:IxM6ojjvoNC7oyUnvR7jfFaKxD+/JeE5CeDLhETjyOuTUbtgnMU7PePZsz:IxM6ojjvWC8y2vRvIwkeE5CeDLsj64iS
Malware Config
Signatures
Files
-
01721815e04998868f592bf8402d1096f28524b8017744ace43498057f7b462f.dll windows x86
b84d0492bac06c5cfc8be5740967e207
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetIconInfo
CharUpperBuffA
GetSysColor
PostMessageA
WaitMessage
FindWindowA
GetWindowThreadProcessId
GetActiveWindow
GetMenuItemID
GetKeyboardType
UpdateWindow
EnableWindow
GetScrollRange
MapWindowPoints
InvalidateRect
WindowFromPoint
GetClientRect
EnumChildWindows
DrawAnimatedRects
SetMenuItemInfoA
AdjustWindowRectEx
GetSubMenu
DefWindowProcA
MapVirtualKeyA
DrawIcon
GetMenuItemCount
ScrollWindow
SetCapture
RegisterClipboardFormatA
GetFocus
IsIconic
KillTimer
GetClipboardData
SetParent
LoadBitmapA
MoveWindow
GetScrollPos
FillRect
GetKeyboardLayoutList
GetWindow
ReleaseCapture
ShowScrollBar
DestroyCursor
GetWindowLongA
GetMenuState
LoadCursorA
DestroyIcon
GetCursor
GetWindowRect
GetWindowPlacement
SetWindowsHookExA
GetKeyboardLayoutNameA
GetDC
SetWindowLongW
IsWindowEnabled
SetWindowTextA
IsDialogMessageW
IsWindowVisible
SetScrollRange
SystemParametersInfoA
IsWindow
PeekMessageA
IsWindowUnicode
GetWindowDC
InsertMenuA
GetSystemMenu
GetClassInfoA
PostQuitMessage
ActivateKeyboardLayout
CharNextW
DestroyMenu
GetMenuStringA
GetDesktopWindow
DefFrameProcA
IsChild
ClientToScreen
TranslateMDISysAccel
SetCursor
MessageBeep
GetScrollInfo
SetActiveWindow
DeleteMenu
SetScrollPos
GetDlgItem
IsRectEmpty
TranslateMessage
GetMessagePos
GetLastActivePopup
GetKeyNameTextA
GetCursorPos
GetSystemMetrics
IsDialogMessageA
gdi32
CopyEnhMetaFileA
CreateBitmap
BitBlt
GetPaletteEntries
kernel32
VirtualAlloc
SetHandleCount
GlobalAlloc
ExitProcess
IsBadHugeReadPtr
lstrcpynA
lstrcatA
LoadLibraryA
VirtualQuery
GetCommandLineA
GetLastError
MoveFileA
LoadLibraryExA
SetThreadLocale
VirtualFree
HeapDestroy
WaitForSingleObject
lstrcmpA
MoveFileExA
ReadFile
lstrcpyA
WriteFile
RaiseException
WideCharToMultiByte
GetCommandLineW
GetModuleHandleA
GetProcAddress
lstrcmpiA
SetEvent
GetOEMCP
lstrlenA
ResetEvent
SetEndOfFile
SetFilePointer
VirtualAllocEx
IsBadReadPtr
Sections
CODE Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES56 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES80 Size: 512B - Virtual size: 43B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES66 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES22 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES49 Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES12 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES28 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES86 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ