QTimeWndProc
Static task
static1
Behavioral task
behavioral1
Sample
58cd7c134b2eac554e1abf122e1f26710cd0bd5d73ed7373b59973e76be11b2a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
58cd7c134b2eac554e1abf122e1f26710cd0bd5d73ed7373b59973e76be11b2a.dll
Resource
win10v2004-20220812-en
General
-
Target
58cd7c134b2eac554e1abf122e1f26710cd0bd5d73ed7373b59973e76be11b2a
-
Size
564KB
-
MD5
80f896728d936e8aca0096a0e29e12d0
-
SHA1
59113107d93605ff73fa30e71130e3589adb113e
-
SHA256
58cd7c134b2eac554e1abf122e1f26710cd0bd5d73ed7373b59973e76be11b2a
-
SHA512
858b387456f953f6fe48b582a7e2cbdde76327f07f66a9081d5c6085def3c26b90dc95675174aff9641c2f00376533ac29f7c8cd650e2aed2bb889a9b018d75f
-
SSDEEP
6144:T9Z44CPsBqdeTPm2HSdeg21iYWJ20x1FRy:T9qRKdxWJJx1F
Malware Config
Signatures
Files
-
58cd7c134b2eac554e1abf122e1f26710cd0bd5d73ed7373b59973e76be11b2a.dll windows x86
b863fb6ad2e1575c1a1276e3eeb220c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
orfcmain
?RESloadBitMap@@YAPAXPAXJ@Z
?assign@strxxx@@IAEXABV1@@Z
?cstring@strxxx@@QAEPAKE@Z
?getVChar@qkey@@QBE?AW4vchar@@XZ
?isShift@qkey@@QBEEXZ
?isAlt@qkey@@QBEEXZ
?isControl@qkey@@QBEEXZ
?setBinary@EXTfldval@@QAEXW4ffttype@@PAEJF@Z
?ECOsetupCallbacks@@YAXPAXPAUEXTCompInfo@@0@Z
?ECOfindObject@@YAPAXPAUEXTCompInfo@@PAXI@Z
?WNDdefWindowProc@@YAJPAXJIJPAUEXTCompInfo@@@Z
?ECOreturnProperties@@YAEPAXPAUEXTCompInfo@@PAUECOproperty@@F@Z
?ECOreturnCompID@@YAJPAXPAUEXTCompInfo@@FF@Z
?ECOreturnCompInfo@@YAJPAXPAUEXTCompInfo@@FF@Z
?ECOreturnConstants@@YAEPAXPAUEXTCompInfo@@JJ@Z
?ECOreturnIcon@@YAEPAXPAUEXTCompInfo@@F@Z
?ECOinsertObject@@YAXPAUEXTCompInfo@@PAX1I@Z
?ECOremoveObject@@YAPAXPAUEXTCompInfo@@PAXI@Z
?setDate@EXTfldval@@QAEXABUdatestamptype@@F@Z
?setNum@EXTfldval@@QAEXNF@Z
?setChar@EXTfldval@@QAEXABVstrxxx@@F@Z
?getNum@EXTfldval@@QAEXAANAAFPAE@Z
?ECOupdatePropInsp@@YAXPAXJ@Z
?ECOisDesign@@YAEPAX@Z
?getDate@EXTfldval@@QAEXAAUdatestamptype@@FPAE@Z
?getLong@EXTfldval@@QAEJXZ
?HANglobalAlloc@@YAPAUqHandleInfo@@JE@Z
?setHandle@EXTfldval@@QAEXW4ffttype@@PAUqHandleInfo@@EF@Z
?ECOsendEvent@@YAEPAXJPAVEXTfldval@@FE@Z
?setLong@EXTfldval@@QAEXJ@Z
?getBinLen@EXTfldval@@QAEJXZ
?ECOfindParamNum@@YAPAUtag_EXTParamInfo@@PAUEXTCompInfo@@J@Z
?getBinary@EXTfldval@@QAEXJPAEAAJ@Z
?ECOaddParam@@YAPAUtag_EXTParamInfo@@PAUEXTCompInfo@@PAVEXTfldval@@JFJEJ@Z
??0EXTfldval@@QAE@PAUfldval@@@Z
?ECOgetProperty@@YAEPAXFAAVEXTfldval@@@Z
?getChar@EXTfldval@@QAEXAAVstrxxx@@E@Z
??1EXTfldval@@QAE@XZ
??0strxxx@@IAE@FE@Z
?ECOreturnMethodEvents@@YAEPAXPAUEXTCompInfo@@PAUECOmethodEvent@@F@Z
?ECOsetCustomTabName@@YAEPAXPAUEXTCompInfo@@J@Z
orfcgui
?GDIsetFontName@@YAXPAUqfnt@@PAKF@Z
?WNDbeginPaint@@YAPAVWNDprocClass@@PAXPAUWNDpaintStruct@@@Z
?GDIsetTextColor@@YAXPAXK@Z
?GDIgetStockBrush@@YAPAXJ@Z
?GDIfillRect@@YAXPAXPAUqrect@@0@Z
?GDIgetBitmapBounds@@YAXPAXPAUqrect@@@Z
?GDIdrawBitmap@@YAXPAX00PAUqrect@@1E@Z
?GDIdeleteObject@@YAXPAX@Z
?WNDendPaint@@YAXPAXPAUWNDpaintStruct@@@Z
?WNDgetBorderSpec@@YAXPAXPAUWNDborderStruct@@@Z
?WNDmapWindowRect@@YAXPAX0PAUqrect@@@Z
?WNDinflateBorderRect@@YAXPAXPAUqrect@@PAUWNDborderStruct@@@Z
?WNDmoveWindow@@YAEPAXHHHHE@Z
?WNDisWindowVisible@@YAEPAX@Z
?WNDgetParent@@YAPAXPAX@Z
?WNDsendMessage@@YAJPAXIIJ@Z
?init@CHRconvFromBytes@@AAEXPAEJ@Z
?CHRfreeCharArray@@YAXPAK@Z
??1CHRconvFromBytes@@QAE@XZ
?WNDgetClientRect@@YAXPAXPAUqrect@@@Z
?init@CHRconvToBytes@@AAEXPAKJ@Z
?CHRfreeByteArray@@YAXPAE@Z
?WNDredrawWindow@@YAXPAXPAUqrect@@PAUqrgn@@K@Z
?WNDgetWindowLong@@YAKPAXJ@Z
?WNDsetWindowLong@@YAKPAXJK@Z
kernel32
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
WriteFile
HeapSize
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
Sleep
RaiseException
HeapAlloc
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
GetCommandLineA
GetCurrentThreadId
RtlUnwind
HeapDestroy
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
user32
GetWindowLongW
GetSystemMetrics
DefWindowProcW
SetWindowLongW
EndPaint
BeginPaint
IsIconic
RegisterClassW
ShowWindow
UpdateWindow
GetWindowRect
GetDesktopWindow
SendMessageW
CreateWindowExW
MoveWindow
DestroyWindow
gdi32
GetStockObject
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 454KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ