Static task
static1
Behavioral task
behavioral1
Sample
cded289a68e4a99688172565013fb71088b5d0d851ec67596b79d564e007ca98.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cded289a68e4a99688172565013fb71088b5d0d851ec67596b79d564e007ca98.dll
Resource
win10v2004-20220812-en
General
-
Target
cded289a68e4a99688172565013fb71088b5d0d851ec67596b79d564e007ca98
-
Size
128KB
-
MD5
0d07973f480227aac3c63c19d987cdf6
-
SHA1
1092243224d3be38294b54fe029cd19f3ffed5ee
-
SHA256
cded289a68e4a99688172565013fb71088b5d0d851ec67596b79d564e007ca98
-
SHA512
096be97d369044a4c34ea013040ad5c4c56c175e38c2da6165f74334b50d60ad7f13e5720f360eb8b16cf37605da06151916f9d7e41d6aaf87063e6473e43a6d
-
SSDEEP
3072:4gaia9eYakN61KrktIXCie/lk+v8qH9yonhT:4gaiYe14k+XCie/lk5Y9yonhT
Malware Config
Signatures
Files
-
cded289a68e4a99688172565013fb71088b5d0d851ec67596b79d564e007ca98.dll windows x86
6f55a9f7217c8fb530f80ab5681df611
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
LoadMenuA
AlignRects
BlockInput
CopyIcon
CreateIcon
DrawTextA
CloseWindow
DrawIcon
DrawIconEx
AppendMenuA
DialogBoxParamW
LoadCursorA
GetMenu
DrawTextW
GetMenu
DrawIconEx
DialogBoxParamW
DrawIcon
GetCursor
CloseWindow
DrawTextA
AppendMenuW
DialogBoxParamA
GetWindowTextA
EndDialog
GetWindowTextLengthA
CopyRect
CopyIcon
IsMenu
DrawTextW
DrawIcon
AlignRects
IsMenu
CalcMenuBar
DrawIconEx
DrawTextA
InsertMenuA
GetCursor
CreateIcon
GetDC
CopyIcon
DialogBoxParamA
AppendMenuA
AppendMenuW
kernel32
GetCPInfo
CreateThread
GetConsoleMode
GetStdHandle
OpenFile
CopyFileExA
FindFirstFileA
ReadFile
CreateDirectoryA
ReadConsoleA
Sleep
SetLastError
GlobalFree
CreateProcessA
GetFileSize
ReadConsoleA
OpenFileMappingA
SetLastError
GetCPInfo
CreateProcessA
CopyFileExW
GlobalFree
GetFileTime
ExitThread
GetComputerNameA
CopyFileA
GetConsoleMode
GetFileSize
FindAtomA
ReadFile
GetFileSize
DeleteFileW
CreateDirectoryA
CopyFileA
GetFileTime
GlobalFree
ReadConsoleA
GetCommandLineA
GetCPInfo
GetLastError
GetConsoleMode
WriteFile
GetStdHandle
DeleteAtom
CopyFileExW
FindAtomA
FindFirstFileA
CopyFileW
GlobalFree
DeleteFileW
CopyFileExW
CreateThread
CopyFileExA
CopyFileA
OpenFile
WriteFile
GetConsoleMode
FindFirstFileA
CreateDirectoryA
GetCommandLineA
ReadFile
GetStdHandle
Sleep
ExitThread
CopyFileW
GetCPInfo
OpenFileMappingA
comctl32
ImageList_Draw
ImageList_LoadImageA
ImageList_GetImageInfo
ImageList_AddIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_AddMasked
ImageList_GetImageRect
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_LoadImage
ImageList_DrawEx
ImageList_Merge
ImageList_Create
ImageList_EndDrag
ImageList_Destroy
ImageList_Replace
ImageList_LoadImageW
ImageList_Merge
ImageList_Copy
ImageList_GetIconSize
ImageList_EndDrag
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_Destroy
ImageList_GetImageRect
ImageList_AddIcon
ImageList_Draw
ImageList_GetIcon
InitCommonControls
ImageList_DrawEx
ImageList_DragEnter
ImageList_Create
ImageList_Create
ImageList_LoadImage
ImageList_DrawEx
ImageList_DragMove
ImageList_Replace
ImageList_Remove
ImageList_GetIconSize
ImageList_GetIcon
ImageList_AddMasked
ImageList_Merge
ImageList_DragShowNolock
ImageList_LoadImageA
ImageList_Copy
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_GetImageCount
advapi32
RegDeleteKeyW
RegEnumKeyW
RegReplaceKeyW
RegDeleteValueA
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExA
RegGetKeySecurity
RegOpenKeyExW
RegQueryValueA
RegCreateKeyW
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RDATa Size: - Virtual size: 61B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bss Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RELoc Size: 2KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ