TooltipInfo
Static task
static1
Behavioral task
behavioral1
Sample
d8bb8eb0b3ee2583a4fedbbab60181a07883ebf797e4d6b3c3a652633a8a1ad7.dll
Resource
win7-20221111-en
General
-
Target
d8bb8eb0b3ee2583a4fedbbab60181a07883ebf797e4d6b3c3a652633a8a1ad7
-
Size
652KB
-
MD5
1206fd4fc9264de8fc0bae5990126fe0
-
SHA1
d085c1055d4232b83c035cc26429c0095526ea6b
-
SHA256
d8bb8eb0b3ee2583a4fedbbab60181a07883ebf797e4d6b3c3a652633a8a1ad7
-
SHA512
4c5167793ae489a6af14854c1744743feda90e4fd1d66a8d09a27382b0ca45a499fe51014e0264296a82d429f293f5c30826d1becabc0ce8654116c6f0305e4d
-
SSDEEP
12288:9aLZhzQRdw9boY5l36dvHedCgwg76ppyNLdwZhM0ZSxat6O7Gv:9aLjsdwj32H9gBSpyNADR6U
Malware Config
Signatures
Files
-
d8bb8eb0b3ee2583a4fedbbab60181a07883ebf797e4d6b3c3a652633a8a1ad7.dll windows x86
48ed51df223c8671c30d8b980c20ab13
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GetThreadLocale
InterlockedIncrement
WritePrivateProfileStringW
GlobalFlags
CompareStringW
GetModuleHandleA
GetVersionExA
GlobalFindAtomW
GetCurrentProcess
HeapFree
HeapAlloc
GlobalReAlloc
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
GetStdHandle
GetModuleFileNameA
GetTimeZoneInformation
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
TlsGetValue
LocalAlloc
InterlockedDecrement
GlobalAddAtomW
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameW
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GlobalDeleteAtom
GetModuleHandleW
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetCurrentDirectoryW
VirtualFree
lstrlenW
VirtualAlloc
DeleteFileA
AreFileApisANSI
GetSystemTime
GetTempPathA
GetCurrentProcessId
DeleteFileW
CloseHandle
GetCurrentThreadId
DeleteCriticalSection
GetDiskFreeSpaceA
LoadLibraryA
GetDiskFreeSpaceW
EnterCriticalSection
LockFileEx
GetProcAddress
GetLastError
GetTempPathW
FlushFileBuffers
MultiByteToWideChar
CreateFileW
ReadFile
GetFileAttributesW
GetFileAttributesA
LeaveCriticalSection
GetVersionExW
Sleep
LoadLibraryW
WideCharToMultiByte
InitializeCriticalSection
WriteFile
FormatMessageA
GetSystemTimeAsFileTime
GetTickCount
LockFile
UnlockFile
InterlockedCompareExchange
QueryPerformanceCounter
FreeLibrary
SetEndOfFile
SetFilePointer
GetFileSize
CreateFileA
GetFullPathNameA
GetFullPathNameW
FindResourceW
LoadResource
LockResource
HeapReAlloc
SizeofResource
shlwapi
PathFindFileNameW
PathFindExtensionW
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
UnregisterClassA
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
DrawTextExW
DrawTextW
TabbedTextOutW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
DestroyMenu
SetForegroundWindow
GetSysColor
GetSysColorBrush
GetWindowTextW
UnregisterClassW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
ShowWindow
GetClassInfoW
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
SendMessageW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GrayStringW
gdi32
DeleteDC
GetStockObject
ExtTextOutW
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
CreateBitmap
DeleteObject
SaveDC
RestoreDC
SetBkColor
GetDeviceCaps
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
SetTextColor
Escape
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
oleaut32
VariantClear
VariantChangeType
VariantInit
Exports
Exports
Sections
.text Size: 472KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE