QReyuEAoy
Static task
static1
Behavioral task
behavioral1
Sample
6ca7fe732564d16e5f9b922d011dfb091853381ae6e735a5543f46a4c4595c2d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ca7fe732564d16e5f9b922d011dfb091853381ae6e735a5543f46a4c4595c2d.dll
Resource
win10v2004-20220812-en
General
-
Target
6ca7fe732564d16e5f9b922d011dfb091853381ae6e735a5543f46a4c4595c2d
-
Size
149KB
-
MD5
29cfede79fab094a3d74c390f411c4fc
-
SHA1
9be3e408c57c17d20403ca6e7091977160dfec8c
-
SHA256
6ca7fe732564d16e5f9b922d011dfb091853381ae6e735a5543f46a4c4595c2d
-
SHA512
aa9de39f6e0135e75044af7e120bd8b6f0adec64b9662ec9e26b0932bbd26e78a587c0a180967be273a2d6f4cfc36f754fdd2e982e53c13cb5c7f9c34e2052e1
-
SSDEEP
1536:SKEDsLgb5GsO9Gd/eLd8ywSGW4qs3e8B8vc0GIillilW7hxa0qXGlzIZ:GsLzmFk+PSGW6u8BQcGklqkuDG6Z
Malware Config
Signatures
Files
-
6ca7fe732564d16e5f9b922d011dfb091853381ae6e735a5543f46a4c4595c2d.dll windows x86
e5cef5cdf12b5176af6f7b5bbd26a24a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InflateRect
GetWindowRect
GetSysColorBrush
GetScrollPos
LoadCursorW
MessageBoxW
IsCharAlphaNumericW
IsWindowVisible
IsWindow
IsRectEmpty
CascadeWindows
GetSystemMetrics
GetQueueStatus
IsZoomed
GetSysColor
LoadMenuW
GetParent
advapi32
CryptEncrypt
CryptGenKey
CryptDecrypt
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 746B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ