Static task
static1
Behavioral task
behavioral1
Sample
b961675ee03d01e73d407dff539d68aa87cbe16bcde4c88acc628de662c3efa3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b961675ee03d01e73d407dff539d68aa87cbe16bcde4c88acc628de662c3efa3.dll
Resource
win10v2004-20220812-en
General
-
Target
b961675ee03d01e73d407dff539d68aa87cbe16bcde4c88acc628de662c3efa3
-
Size
348KB
-
MD5
43eb0861ad7bcc0c80786d1562ab1009
-
SHA1
a225f3865893596e5c982a312aae4c251f626540
-
SHA256
b961675ee03d01e73d407dff539d68aa87cbe16bcde4c88acc628de662c3efa3
-
SHA512
83592aa097a8a7005077966fd7278297e8c839a7af78199ebf189be59a69d22ccac06289967b923dfc0b077cceddb6eb378903a785c25e7e205d68fe2650db5d
-
SSDEEP
6144:3Z2WedUQ+3juk2rQyBI/Msz1UolMyfhtVV3eHLj5nUhFc9GMYB8D:0ndc0QwcMszFlMyfnuHPpUXc95YB8D
Malware Config
Signatures
Files
-
b961675ee03d01e73d407dff539d68aa87cbe16bcde4c88acc628de662c3efa3.dll windows x86
b8a68bede8a447ff3810ce0318c91bf6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetWindowLongW
GetForegroundWindow
GetKeyNameTextA
GetSystemMenu
GetClipboardData
GetMenuItemInfoA
GetScrollInfo
IsIconic
GetScrollPos
GetWindowLongA
IsZoomed
GetKeyboardType
GetPropA
GetMenuItemCount
GetKeyState
GetWindowTextA
GetParent
GetFocus
GetSysColor
IsWindowUnicode
IsChild
GetWindowDC
GetSysColorBrush
GetKeyboardState
IntersectRect
GetMenuState
GetWindow
GetWindowPlacement
GetDlgItem
kernel32
GetLastError
SetHandleCount
HeapDestroy
GetProcAddress
SizeofResource
WaitForSingleObject
LocalFree
GetCommandLineA
ExitProcess
lstrcatA
VirtualAllocEx
VirtualAlloc
IsBadReadPtr
ReadFile
ResetEvent
MoveFileExA
IsBadHugeReadPtr
SetLastError
LoadLibraryExA
MoveFileA
LoadLibraryA
WideCharToMultiByte
LocalReAlloc
MulDiv
lstrcmpiA
RaiseException
lstrcpynA
GetCommandLineW
LocalAlloc
lstrcmpA
SetErrorMode
GetModuleHandleA
GetOEMCP
VirtualQuery
VirtualFree
gdi32
CreateBitmap
SetPixel
BitBlt
CopyEnhMetaFileA
Sections
CODE Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES35 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES89 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES65 Size: 512B - Virtual size: 347B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES21 Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES67 Size: 512B - Virtual size: 361B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES75 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES62 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES30 Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 906B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ