EnumBaseImageDataPropertyReset
Static task
static1
Behavioral task
behavioral1
Sample
af114e2fe92c0a7a7ffed54c42af533f291b49793c3bdb16e23f7699d745ea8e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af114e2fe92c0a7a7ffed54c42af533f291b49793c3bdb16e23f7699d745ea8e.dll
Resource
win10v2004-20220901-en
General
-
Target
af114e2fe92c0a7a7ffed54c42af533f291b49793c3bdb16e23f7699d745ea8e
-
Size
212KB
-
MD5
69dfc57c59deb44894acb595d0060354
-
SHA1
526fbe9389b2b8668b23ecde15b88befb26ff1e2
-
SHA256
af114e2fe92c0a7a7ffed54c42af533f291b49793c3bdb16e23f7699d745ea8e
-
SHA512
95b29ac953bb68fa362b85c81df53f4d37f69fd9834425bcde5c7b9dbcbf50ec8797e0944c1984219e52230b7409533cea6abb56a97c12f1bda2385c39929132
-
SSDEEP
6144:2VNDayHz+td6DrZjcOpg1V8uLapyB0970/TXJ0Mr:2TD7Hz+tdgrZIyMLGpS097ADaM
Malware Config
Signatures
Files
-
af114e2fe92c0a7a7ffed54c42af533f291b49793c3bdb16e23f7699d745ea8e.dll windows x86
0b051ce70af518ffb09fdfd7e7e39e35
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
ExitThread
FindClose
FormatMessageA
FreeEnvironmentStringsW
GetCommandLineA
GetConsoleCP
GetLastError
GetLocaleInfoA
GetModuleHandleA
GetNumberFormatA
GetStartupInfoA
GetStringTypeW
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
InterlockedIncrement
IsBadReadPtr
IsValidCodePage
LCMapStringW
LoadLibraryA
MultiByteToWideChar
OpenEventA
ResetEvent
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsFree
VirtualAlloc
WriteFile
lstrcmpiA
lstrcpynA
user32
UpdateWindow
SetWindowTextA
SetUserObjectSecurity
SetMenuItemInfoA
ReleaseCapture
ModifyMenuA
MessageBoxA
InflateRect
GetWindowPlacement
GetParent
FillRect
EndPaint
DestroyIcon
DeferWindowPos
CreatePopupMenu
CheckMenuItem
advapi32
LsaLookupPrivilegeName
GetKernelObjectSecurity
ElfOpenEventLogW
DeleteService
ObjectPrivilegeAuditAlarmW
RegDeleteValueW
SetFileSecurityA
SetSecurityDescriptorOwner
ddraw
DDInternalUnlock
DDInternalLock
DirectDrawEnumerateExA
DirectDrawCreateClipper
ole32
CoBuildVersion
CoCreateGuid
CoCreateInstance
CoGetMalloc
CoTaskMemAlloc
CLSIDFromString
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ