?GetForegroundWindowGetForegroundWindowGetForegroundWindowGetForegroundWindowGetForegroundWindow@@YGKXZjPfiGVmyVLRfDZdbJTezUnXwjEipYvwgriewiturkljfgjkdljkgfdljhgiopfgoufdoigjfdoijhgoifljhioldjfglhkjdgflkg
Static task
static1
Behavioral task
behavioral1
Sample
49687b5712b2cd175b77c74f24c9f9defb84a646d3b5f8e8b5a2ad124c671cd5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49687b5712b2cd175b77c74f24c9f9defb84a646d3b5f8e8b5a2ad124c671cd5.dll
Resource
win10v2004-20220812-en
General
-
Target
49687b5712b2cd175b77c74f24c9f9defb84a646d3b5f8e8b5a2ad124c671cd5
-
Size
79KB
-
MD5
9668c0ef2e3e20dacb1e9efb7af3b634
-
SHA1
4508e2b9931c66738947d64aeea43161fa8b2a3d
-
SHA256
49687b5712b2cd175b77c74f24c9f9defb84a646d3b5f8e8b5a2ad124c671cd5
-
SHA512
1b298a839b3e201612877d27c36eb598d5759b5e339efac3283ce5e5646933ace4b78cb8892d137c066342aaa6b09ae2ca2a294f5869286c693c0c40029f8a42
-
SSDEEP
1536:meTvB5fnDQdNz1VZRqQPTQ3vMOan1YwD6e0tGkMet:/BlncdNxnHTQ3vMO0/50tGkFt
Malware Config
Signatures
Files
-
49687b5712b2cd175b77c74f24c9f9defb84a646d3b5f8e8b5a2ad124c671cd5.dll windows x86
00aa4e8eed777d74e9fb4225e1b28425
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePatternBrush
GetPixel
CreateHatchBrush
GetNearestPaletteIndex
EnumFontFamiliesW
CreateRectRgn
GetLayout
CreateRectRgnIndirect
advapi32
OpenBackupEventLogA
ole32
CoCreateGuid
user32
BeginDeferWindowPos
DefMDIChildProcW
TrackPopupMenu
SetScrollRange
OpenDesktopW
GetFocus
CopyRect
LoadBitmapA
GetKBCodePage
DialogBoxParamA
EnumChildWindows
GetAsyncKeyState
FindWindowW
MessageBoxIndirectA
kernel32
CancelWaitableTimer
lstrcpyW
IsBadStringPtrW
RaiseException
GlobalLock
GetStringTypeExW
GlobalFindAtomA
GetFullPathNameW
Exports
Exports
Sections
.dbgdir Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.poiujh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mytrrg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oiuuyt Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retf Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mnbhg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ