wQy_rw_hq
Static task
static1
Behavioral task
behavioral1
Sample
7e61bb12697b000eab56a0355ce516c1f840d7feae7e9e2de2aff5a7f02046b4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7e61bb12697b000eab56a0355ce516c1f840d7feae7e9e2de2aff5a7f02046b4.dll
Resource
win10v2004-20221111-en
General
-
Target
7e61bb12697b000eab56a0355ce516c1f840d7feae7e9e2de2aff5a7f02046b4
-
Size
318KB
-
MD5
809e9d765b393a68f95724477f6fc561
-
SHA1
165a590c0b384632652d9d776625c1d61f7e1eb8
-
SHA256
7e61bb12697b000eab56a0355ce516c1f840d7feae7e9e2de2aff5a7f02046b4
-
SHA512
657ff8c006ebddc4b799fd068694da0c2ad7a6af6bd5c4529b9501f8dccdc4984eef6d77e95100f315b865fa78b7179529904021f74109a1ba5490b8dc52f86d
-
SSDEEP
6144:uy6BQYj+phLmIrkkkkckkkkbkkkhkkWkzIDvsssssssr:uy6BQS+pM4kkkkckkkkbkkkhkkWJvssk
Malware Config
Signatures
Files
-
7e61bb12697b000eab56a0355ce516c1f840d7feae7e9e2de2aff5a7f02046b4.dll windows x86
f884a4eaf909832d224458f6616db8a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
PostQuitMessage
SetWindowLongW
TranslateMessage
DefWindowProcW
AnimateWindow
FindWindowA
GetWindowLongW
FindWindowExA
DestroyWindow
DispatchMessageW
PeekMessageW
CloseWindow
advapi32
RegOpenKeyExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
ole32
CoCreateInstance
CreateBindCtx
CoTaskMemFree
StringFromCLSID
CLSIDFromString
CoCreateFreeThreadedMarshaler
StringFromIID
IIDFromString
StringFromGUID2
Exports
Exports
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 162KB - Virtual size: 545KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ