EnableKBHook
Static task
static1
Behavioral task
behavioral1
Sample
db529e093b5facfb51e9cc8336b5795217b609182caa821890b8d3ac4ac086d2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db529e093b5facfb51e9cc8336b5795217b609182caa821890b8d3ac4ac086d2.dll
Resource
win10v2004-20220812-en
General
-
Target
db529e093b5facfb51e9cc8336b5795217b609182caa821890b8d3ac4ac086d2
-
Size
32KB
-
MD5
d0911ceedf0397adf2b5161934147604
-
SHA1
1155f06888b6ed05a0fc36c71dc3a441a189cd4e
-
SHA256
db529e093b5facfb51e9cc8336b5795217b609182caa821890b8d3ac4ac086d2
-
SHA512
94affac7e121b97ad5b17aff0b2f220252f0b377f06c9831c731e7f5addaf439a4dbbb072c172fd1fef6a38ed281afa8f0f30d19164b8b2920e381f032bc3ae9
-
SSDEEP
384:5WMQDK0uqRgpTKpnXrPTIsmkmlYbjC1yLz6oIo9t:5WXucgpTK57PT/WG3Io9
Malware Config
Signatures
Files
-
db529e093b5facfb51e9cc8336b5795217b609182caa821890b8d3ac4ac086d2.dll windows x86
bfccfa249c27294b1ee9d2d590a3ef37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowsHookExA
UnhookWindowsHookEx
GetCursorPos
SendMessageA
kernel32
GetEnvironmentStrings
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shared Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ