Static task
static1
Behavioral task
behavioral1
Sample
dfea47ad9349a4ec62f7b9b6795e84455df28f51c5e2173de44830e9654103a3.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfea47ad9349a4ec62f7b9b6795e84455df28f51c5e2173de44830e9654103a3.dll
Resource
win10v2004-20220901-en
General
-
Target
dfea47ad9349a4ec62f7b9b6795e84455df28f51c5e2173de44830e9654103a3
-
Size
210KB
-
MD5
112f576135687f0e51756834ee464420
-
SHA1
fd7fd9c99276bf3c5d205d96d378aafa0ca443cb
-
SHA256
dfea47ad9349a4ec62f7b9b6795e84455df28f51c5e2173de44830e9654103a3
-
SHA512
89c35845ffa96ed9d5ab309613e0fba1b928ec586852bd5d6997a6913b4551deae7a65262a3f8fe11b54c8a73e8f7baf6e712e0c20d62a7496b8b40b643241ca
-
SSDEEP
6144:NYVpv602Pf/QUtXVMcSGhuAxNjrAZ880:uV0PH/htXNuAnrA7
Malware Config
Signatures
Files
-
dfea47ad9349a4ec62f7b9b6795e84455df28f51c5e2173de44830e9654103a3.dll windows x86
2cf7f9377ee9c61f68a6ec8529b00cfe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerInstallFileA
user32
CreateIcon
GetWindowThreadProcessId
GetClassLongA
ClientToScreen
EndPaint
GetSystemMetrics
CheckMenuItem
LoadKeyboardLayoutA
GetWindowDC
GetMenuItemCount
DestroyMenu
IsChild
CharNextW
SetWindowsHookExA
EnableMenuItem
GetWindowPlacement
GetPropA
SetClassLongA
DrawFrameControl
FrameRect
SetRect
TrackPopupMenu
SetParent
DefMDIChildProcA
GetDC
GetTopWindow
EnumThreadWindows
GetKeyboardState
InflateRect
SetWindowLongW
GetActiveWindow
GetScrollRange
GetKeyboardType
SetWindowPos
ReleaseDC
GetMenuState
GetLastActivePopup
GetWindowRect
DestroyWindow
SetForegroundWindow
IsWindowVisible
DefFrameProcA
RegisterClassA
IntersectRect
InsertMenuA
GetDlgItem
CharNextA
PeekMessageA
UnregisterClassA
WaitMessage
SystemParametersInfoA
CallWindowProcA
MapWindowPoints
GetKeyboardLayoutNameA
GetKeyboardLayoutList
OpenClipboard
GetKeyState
ReleaseCapture
BeginPaint
EnableScrollBar
LoadBitmapA
CreateWindowExA
WindowFromPoint
GetDesktopWindow
GetIconInfo
DeleteMenu
DispatchMessageA
shell32
SHGetFolderPathA
SHGetSpecialFolderLocation
SHFileOperationA
gdi32
CreatePenIndirect
GetCurrentPositionEx
CreateDIBitmap
GetBitmapBits
CreatePalette
GetDIBits
kernel32
VirtualAllocEx
FormatMessageA
LocalFree
GetLocalTime
GetStartupInfoA
GlobalDeleteAtom
ExitThread
VirtualAlloc
SetFilePointer
HeapAlloc
GetLastError
FreeLibrary
ExitProcess
LoadLibraryExA
CloseHandle
LoadResource
GetSystemDefaultLangID
GetACP
GetModuleHandleA
LoadLibraryA
GetThreadLocale
lstrlenA
GetProcAddress
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 474B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ