CRLMouseCres
Static task
static1
Behavioral task
behavioral1
Sample
094552d78076300e1d095c32e50e11bf5b0345f8709884511985cc6a2804a6fb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
094552d78076300e1d095c32e50e11bf5b0345f8709884511985cc6a2804a6fb.dll
Resource
win10v2004-20220812-en
General
-
Target
094552d78076300e1d095c32e50e11bf5b0345f8709884511985cc6a2804a6fb
-
Size
132KB
-
MD5
0c0c4a42e62aec1285d8f86d49509113
-
SHA1
705e0f31a205a83ff7b3a12d8a282bfddb1178b1
-
SHA256
094552d78076300e1d095c32e50e11bf5b0345f8709884511985cc6a2804a6fb
-
SHA512
161b98ba48cab926b69e78600fa491a4fabd94613ccbff1c8a614bc0109ef3c1f7edf3baaf267e06cdac18d695d7c1997eeaa362aa46d45c2c36af90576ff607
-
SSDEEP
1536:BecSrX7dYhawSrDDFwZXcHBvsj3MMNeEz/rEmGSOc6g8OO/daj0hMJxnyt:B2dcSDFwZA+3tfrEmGSFRa/BhMe
Malware Config
Signatures
Files
-
094552d78076300e1d095c32e50e11bf5b0345f8709884511985cc6a2804a6fb.dll windows x86
1d1171d0f310eba50de3cad1942b0fbd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetProcAddress
CreateProcessA
CloseHandle
OpenEventA
ExitProcess
Sleep
GetModuleFileNameA
GetLastError
WaitForSingleObject
GetTickCount
InterlockedCompareExchange
GetModuleHandleA
CreateEventA
lstrlenA
ReleaseMutex
MapViewOfFile
LeaveCriticalSection
CreateDirectoryA
UnmapViewOfFile
LocalFree
GetCommandLineA
LoadLibraryA
lstrlenW
SetLastError
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
ole32
OleSetContainedObject
CreateBindCtx
CoUninitialize
CoCreateGuid
OleCreate
CoInitialize
user32
GetParent
SetTimer
CreateWindowExA
DefWindowProcA
PostMessageA
DispatchMessageA
KillTimer
SendMessageA
RegisterWindowMessageA
DestroyWindow
FindWindowA
GetClassNameA
GetWindowLongA
GetMessageA
SetWindowLongA
GetSystemMetrics
PostQuitMessage
TranslateMessage
oleaut32
SysAllocStringLen
SysAllocString
SysFreeString
advapi32
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ