StartUI
Static task
static1
Behavioral task
behavioral1
Sample
60b4183869db0da1e876b503883d50d90cccbccc40fe887508e581cf7624248b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
60b4183869db0da1e876b503883d50d90cccbccc40fe887508e581cf7624248b.dll
Resource
win10v2004-20220812-en
General
-
Target
60b4183869db0da1e876b503883d50d90cccbccc40fe887508e581cf7624248b
-
Size
284KB
-
MD5
0e17b4b7946c3089a54302bc1f0a9345
-
SHA1
0d5299cf976560c399a00d5d5145f15e251a7016
-
SHA256
60b4183869db0da1e876b503883d50d90cccbccc40fe887508e581cf7624248b
-
SHA512
a91cbb367faf236cee2bf90447bef39096341cb14f027b4e12c85ec32b3693b66e2f278604e1dbeb2b751ed0f33dc7658c0cb9c5440eb0934e40b359cd2a6595
-
SSDEEP
6144:hTaWNQXKCS0kLUQBZjzP64ENB59B1JLQq:ihkLbhNCBvB12q
Malware Config
Signatures
Files
-
60b4183869db0da1e876b503883d50d90cccbccc40fe887508e581cf7624248b.dll windows x86
1ac59cca7bc602f425008aeac226bdc5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetSystemDirectoryA
GetWindowsDirectoryA
InterlockedExchange
CompareStringA
FreeLibrary
GetModuleHandleA
GetLastError
GetPrivateProfileIntA
Sleep
LoadLibraryA
GetModuleFileNameA
GetCurrentDirectoryA
GetPrivateProfileStringA
MulDiv
GetVersionExA
CreateFileA
CloseHandle
ReadFile
lstrcpynA
lstrcpyA
ExitProcess
user32
PtInRect
ReleaseCapture
GetWindowDC
IsWindowEnabled
InflateRect
GetDC
GetFocus
GetClientRect
FillRect
DrawIconEx
DrawTextA
IsWindow
ReleaseDC
GetWindowRect
PostMessageA
SetWindowPos
GetDlgItem
SendMessageA
EnumChildWindows
SetWindowTextA
LoadIconA
ShowWindow
EndDialog
LoadImageA
CreateWindowExA
InvalidateRect
DrawFocusRect
ScreenToClient
CharNextA
GetParent
SystemParametersInfoA
FindWindowA
DestroyWindow
MessageBoxA
DialogBoxParamA
CreateDialogParamA
MessageBeep
BeginPaint
EndPaint
SendDlgItemMessageA
KillTimer
SetTimer
MoveWindow
SetFocus
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
GetSystemMetrics
DefWindowProcA
LoadStringA
shell32
ShellExecuteExA
msimg32
GradientFill
comctl32
InitCommonControlsEx
gdi32
SetBkMode
SetTextColor
CreateSolidBrush
GetDeviceCaps
DeleteObject
FrameRgn
CreateRectRgnIndirect
CreatePalette
GetDIBColorTable
SelectObject
CreateCompatibleDC
CreateHalftonePalette
GetObjectA
GetPixel
CombineRgn
CreateRectRgn
StretchBlt
SetStretchBltMode
SelectClipRgn
DeleteDC
BitBlt
FillRgn
CreateCompatibleBitmap
CreateFontA
LPtoDP
CreateRoundRectRgn
GetNearestColor
SelectPalette
RealizePalette
msvcrt
_initterm
free
_onexit
__dllonexit
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
_adjust_fdiv
malloc
strrchr
vsprintf
time
strcat
_mbsicmp
_mbstok
_mbsrchr
_callnewh
??3@YAXPAX@Z
_purecall
memcpy
memset
_access
sprintf
_EH_prolog
__CxxFrameHandler
strcpy
strlen
_mbslen
_mbsnbcpy
??1type_info@@UAE@XZ
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE