Static task
static1
Behavioral task
behavioral1
Sample
1e4d958eeac96e27c44844126fda3fddf26d906faf561a4ed469e05d6d17bc39.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e4d958eeac96e27c44844126fda3fddf26d906faf561a4ed469e05d6d17bc39.dll
Resource
win10v2004-20220901-en
General
-
Target
1e4d958eeac96e27c44844126fda3fddf26d906faf561a4ed469e05d6d17bc39
-
Size
88KB
-
MD5
7e86ec54c204e3585966cb641ec8881f
-
SHA1
ef9f354d83524e00201d5ea34a8adddff1cc0156
-
SHA256
1e4d958eeac96e27c44844126fda3fddf26d906faf561a4ed469e05d6d17bc39
-
SHA512
e60c66a3f501c6b25f30defe2e6fa4c3da3f4d1b80ddda3ae58ddb6dda58af04b1d6b93eb0a4ca7cbd744564ed392087e0cce40a71a36cf4ed82bcb231ef2a78
-
SSDEEP
1536:cxDgdDSa0NMaKvrkv/yWfoYfHyiF1SInTbplqaGgqEJmQs8BT9aNjFjL:cika3aRqWdx1HnTbrqBgJJc885j
Malware Config
Signatures
Files
-
1e4d958eeac96e27c44844126fda3fddf26d906faf561a4ed469e05d6d17bc39.dll windows x86
ee7dab5846f276b3697892af2f43e88a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameW
PrintDlgExW
WantArrows
GetSaveFileNameA
user32
SetMenuItemInfoA
SetPropA
SetScrollInfo
SetFocus
SetDlgItemTextA
SetClassLongA
RedrawWindow
PtInRect
PostMessageA
IsWindowVisible
IsIconic
IsDlgButtonChecked
GetWindowRect
GetUpdateRgn
GetSystemMetrics
SetForegroundWindow
GetParent
GetDlgItemTextA
GetDesktopWindow
GetDC
GetClientRect
GetClassLongA
GetCapture
FindWindowA
EnumWindows
EnumChildWindows
DrawTextA
DrawEdge
CreatePopupMenu
CheckMenuItem
AppendMenuA
SetTimer
SetWindowLongA
SetWindowPlacement
GetSysColor
msi
MsiSetComponentStateW
MsiReinstallProductW
MsiRecordSetStringA
MsiRecordSetStreamW
MsiProvideQualifiedComponentW
MsiProvideComponentFromDescriptorW
MsiOpenPackageExW
MsiMessageBoxW
MsiLoadStringW
MsiLoadStringA
MsiIsProductElevatedA
MsiInstallMissingFileW
MsiSetPropertyW
MsiGetSummaryInformationA
MsiGetProductPropertyA
MsiGetLastErrorRecord
MsiGetActiveDatabase
MsiEnumFeaturesA
MsiEnumClientsW
MsiCreateTransformSummaryInfoW
MsiConfigureProductW
MsiConfigureProductExW
MsiConfigureProductA
MsiCloseAllHandles
MsiAdvertiseScriptA
MsiSourceListForceResolutionA
MsiSummaryInfoGetPropertyA
MsiSummaryInfoPersist
MsiSummaryInfoSetPropertyA
MsiSummaryInfoSetPropertyW
MsiVerifyPackageW
MsiViewClose
MsiViewFetch
MsiViewModify
MsiGetUserInfoW
kernel32
EnumSystemLocalesA
CreateEventW
CommConfigDialogW
CloseHandle
CancelDeviceWakeupRequest
CreateMutexW
CreateTimerQueue
DeleteFiber
ExitProcess
FlushFileBuffers
GetACP
GetCommMask
GetCommProperties
GetCommandLineA
GetDateFormatA
GetFileType
GetLogicalDriveStringsW
GetLongPathNameW
GetModuleHandleA
GetOEMCP
GetPrivateProfileSectionNamesW
GetProcessHeap
GetProcessShutdownParameters
GetProcessTimes
GetStartupInfoA
GetThreadLocale
GetTickCount
GetVersionExA
GlobalFlags
GlobalGetAtomNameW
GlobalMemoryStatusEx
HeapAlloc
HeapCreate
WritePrivateProfileStructA
SwitchToThread
SetEnvironmentVariableW
OpenMutexW
OpenJobObjectW
OpenJobObjectA
Module32NextW
MapViewOfFileEx
LocalLock
LocalFree
LeaveCriticalSection
IsBadReadPtr
IsBadHugeReadPtr
HeapValidate
CreateFileW
oledlg
OleUIConvertA
OleUIChangeIconA
OleUICanConvertOrActivateAs
OleUIBusyA
dbghelp
SymRegisterCallback64
SymGetSymPrev
SymEnumSymbols
lmi
ImageRvaToSection
comctl32
CreateStatusWindowA
CreateUpDownControl
DestroyPropertySheetPage
DrawInsert
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollProp
FlatSB_SetScrollPos
GetMUILanguage
ImageList_Add
ImageList_AddMasked
ImageList_Copy
ImageList_DragLeave
ImageList_DragMove
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Merge
ImageList_Read
ImageList_Remove
ImageList_SetFlags
ImageList_SetImageCount
InitCommonControlsEx
LBItemFromPt
MenuHelp
CreateMappedBitmap
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ