Static task
static1
Behavioral task
behavioral1
Sample
aee9b8e1d78b7ebf5cec843f86aa4230b6f7a9b2c286b167bca127b65fe5d75a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aee9b8e1d78b7ebf5cec843f86aa4230b6f7a9b2c286b167bca127b65fe5d75a.dll
Resource
win10v2004-20220812-en
General
-
Target
aee9b8e1d78b7ebf5cec843f86aa4230b6f7a9b2c286b167bca127b65fe5d75a
-
Size
302KB
-
MD5
0dc167739ec1a417557bf4fb8196b490
-
SHA1
1d1dd0fd3045ecc54c80b77cb808c5028aec8918
-
SHA256
aee9b8e1d78b7ebf5cec843f86aa4230b6f7a9b2c286b167bca127b65fe5d75a
-
SHA512
1d3ad479278f8fd88f54b5cb8381a5a75382245f97585fd1a0b9f157543a6c5e71c2873f259ae6828ae5c12f01478c6211db9288da804204db30778eaf0bfbe0
-
SSDEEP
6144:llO/cuoOf5GtOGhoR4iPuDL6/UesA6drPkJ2xkBE1qNvAseX63rb:lIRGtOGhA4zn6/UeSNSPYs4
Malware Config
Signatures
Files
-
aee9b8e1d78b7ebf5cec843f86aa4230b6f7a9b2c286b167bca127b65fe5d75a.dll windows x86
9be899b956f24e0a4fb0edcf88dae2f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeA
ole32
CoTaskMemFree
WriteClassStm
CoUnmarshalInterface
GetHGlobalFromStream
CoDisconnectObject
user32
LoadStringA
RegisterClassA
MapVirtualKeyA
OffsetRect
PostMessageA
MapWindowPoints
ScrollWindow
PostQuitMessage
SetActiveWindow
RemoveMenu
ReleaseDC
OpenClipboard
PeekMessageW
PtInRect
MessageBoxA
LoadCursorA
PeekMessageA
SendMessageW
RegisterClipboardFormatA
ScreenToClient
LoadIconA
LoadBitmapA
SendMessageA
MessageBeep
ReleaseCapture
OemToCharA
LoadKeyboardLayoutA
RedrawWindow
RegisterWindowMessageA
RemovePropA
gdi32
CreatePalette
CreatePenIndirect
GetBitmapBits
CreateFontIndirectA
CreateDIBitmap
kernel32
HeapDestroy
lstrcpynA
lstrlenA
LocalReAlloc
GetACP
IsBadReadPtr
LocalAlloc
GetCommandLineA
SizeofResource
LoadLibraryA
GlobalAlloc
GetModuleHandleA
lstrcpyA
VirtualFree
VirtualAlloc
MoveFileA
WriteFile
GetProcAddress
lstrcmpA
MoveFileExA
MulDiv
WideCharToMultiByte
ExitThread
lstrcmpiA
GetModuleHandleW
LocalFree
VirtualQuery
LoadLibraryExA
ExitProcess
WaitForSingleObject
lstrcatA
VirtualAllocEx
msvcrt
time
_acmdln
memcpy
memcmp
shell32
SHGetDiskFreeSpaceA
comctl32
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Write
ImageList_Remove
advapi32
RegQueryValueExA
RegEnumKeyA
RegOpenKeyA
oleaut32
SysFreeString
VariantChangeType
SysAllocStringLen
SafeArrayCreate
SafeArrayUnaccessData
VariantCopyInd
GetErrorInfo
OleLoadPicture
SafeArrayPtrOfIndex
comdlg32
FindTextA
GetFileTitleA
Sections
CODE Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc4 Size: 1KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc9 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc5 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ