@DispatchAPI@4
Static task
static1
Behavioral task
behavioral1
Sample
badc7f0149d04694a339265a00bd617a21642b75b0ebfb2653b5661bd4a843fd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
badc7f0149d04694a339265a00bd617a21642b75b0ebfb2653b5661bd4a843fd.dll
Resource
win10v2004-20220901-en
General
-
Target
badc7f0149d04694a339265a00bd617a21642b75b0ebfb2653b5661bd4a843fd
-
Size
67KB
-
MD5
b5c429199e8212a59998213303acfaa1
-
SHA1
dd23b82986d5767787de82b743fcbb827642fa5a
-
SHA256
badc7f0149d04694a339265a00bd617a21642b75b0ebfb2653b5661bd4a843fd
-
SHA512
69a3c15ee5a4fc88224d7fa1be5e5b10de9ed8097305ad1540514d4aae4070944c3c373f73147b7f33c7149220d24cd79d57605bf5f2b8f4974e6346b7382da5
-
SSDEEP
768:BclpIr2VhRwb7gvSIfEs50/FIEmiEOYq5hTFCnEfUJbrXeu31LJ:BclpIrQmWS2E0GIEeeaEMJbr
Malware Config
Signatures
Files
-
badc7f0149d04694a339265a00bd617a21642b75b0ebfb2653b5661bd4a843fd.dll windows x86
03d77f2090c6bf8d835c368d7c56c64b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
LoadModule
GetProcAddress
TlsGetValue
GetVersionExA
TlsSetValue
TlsAlloc
TlsFree
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryA
FreeLibrary
CloseHandle
GetModuleFileNameA
SetFileTime
SystemTimeToFileTime
GetFileTime
CreateFileA
GetDriveTypeA
GetProfileStringA
WriteProfileStringA
GlobalFree
GlobalSize
GlobalReAlloc
GlobalCompact
GetVersion
Sleep
user32
ShowCursor
MessageBoxA
CountClipboardFormats
GetWindowRect
LoadStringA
CharLowerA
CharUpperA
SetClipboardData
RegisterClipboardFormatA
EnumClipboardFormats
IsClipboardFormatAvailable
DdeClientTransaction
GetClipboardFormatNameA
GetClipboardData
DdeFreeDataHandle
DdeUninitialize
EmptyClipboard
DdeDisconnect
DispatchMessageA
SendMessageA
TranslateMessage
DdeInitializeA
PeekMessageA
FindWindowA
SetActiveWindow
DdeConnect
GetActiveWindow
DdeGetData
wsprintfA
DdeGetLastError
DdeCreateStringHandleA
DdeFreeStringHandle
CloseClipboard
OpenClipboard
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
msvcrt40
__dllonexit
_initterm
free
malloc
_setjmp3
vsprintf
longjmp
_mkdir
_errno
_rmdir
strncpy
strpbrk
strtok
__p___mb_cur_max
_isctype
strstr
memset
strcmp
_adjust_fdiv
__p__pctype
atoi
memcpy
_ftol
strcpy
strchr
strrchr
strcat
fopen
fclose
strlen
_onexit
memmove
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 717B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ