?OpenWindowStationOpenWindowSta
Static task
static1
Behavioral task
behavioral1
Sample
1521527880bf8c2c044ce40bc688b7e69911c8539aae7f9e4fb56ea850ba77a4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1521527880bf8c2c044ce40bc688b7e69911c8539aae7f9e4fb56ea850ba77a4.dll
Resource
win10v2004-20220812-en
General
-
Target
1521527880bf8c2c044ce40bc688b7e69911c8539aae7f9e4fb56ea850ba77a4
-
Size
56KB
-
MD5
74b0fd26089a1fa890c162ec8cac947e
-
SHA1
cf6e339ebe5d4c6373173e8cf565b90a4c2c5639
-
SHA256
1521527880bf8c2c044ce40bc688b7e69911c8539aae7f9e4fb56ea850ba77a4
-
SHA512
904aa9a49ba3eb66a4afffc4c2e2d27e022e66d1f1aa277fbcc211d788964439797acc5371dc4c11f405a30663007f34c31f8568da3fd9f69060689bf7c6ac06
-
SSDEEP
768:XuYXDenjCponIt6z9S9NBXk0bq2YCDLrlUW0BUTb8KDzNDhDAX:eCponItk9wTXk0bq2YC3rlUVBNKFhDk
Malware Config
Signatures
Files
-
1521527880bf8c2c044ce40bc688b7e69911c8539aae7f9e4fb56ea850ba77a4.dll windows x86
91c9de342109f82e6276d42466a7d3f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowExA
FlashWindow
MoveWindow
OpenIcon
CreateMenu
kernel32
Sleep
CreateFileMappingW
GetProcAddress
VirtualQuery
lstrlenW
FileTimeToSystemTime
GetFileType
DeleteAtom
GetStartupInfoW
HeapFree
GetPriorityClass
WriteFile
LoadLibraryExW
Exports
Exports
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yutyrt Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hjgjgf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hgffds Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uytytr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cxcx Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ