Static task
static1
Behavioral task
behavioral1
Sample
10387ed837fbaee7b9267e12692241f6e446423c0c22d5976a4c67d725b49725.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
10387ed837fbaee7b9267e12692241f6e446423c0c22d5976a4c67d725b49725.dll
Resource
win10v2004-20220812-en
General
-
Target
10387ed837fbaee7b9267e12692241f6e446423c0c22d5976a4c67d725b49725
-
Size
181KB
-
MD5
30cb3f5e917c74b31ebd682ba34373e0
-
SHA1
2f254e93c2807b2a6be587b0a2b3937ad47b908e
-
SHA256
10387ed837fbaee7b9267e12692241f6e446423c0c22d5976a4c67d725b49725
-
SHA512
94b24b9dccdb4054cbb17f38db94de6b0b8154665aec0b2401e4d7489f5c7382370fd3e211e005f7b462b97fa4d3e174a6b1cd8cb6e4b90e6550cc04d44c984c
-
SSDEEP
3072:7R3FTQYY9JTXdSyTMk/6N8JlCXnow+H0p3SfsuRGBkXTjsMyr7S7Cq:VBQDnXdSgCYw+EifsYGKXTbyr7S7j
Malware Config
Signatures
Files
-
10387ed837fbaee7b9267e12692241f6e446423c0c22d5976a4c67d725b49725.dll windows x86
ee8888e581fdbe5bec9116656c242f36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
GetVersionExA
CreateDirectoryA
GetFileAttributesA
MoveFileExA
GetModuleHandleA
GlobalFree
RaiseException
LoadResource
LockResource
FindResourceExA
user32
CharPrevW
CharNextW
LoadStringW
MessageBoxW
IsDlgButtonChecked
SetFocus
GetDlgItem
CheckRadioButton
DialogBoxParamW
GetDlgItemTextW
MessageBoxExW
gdi32
DeleteObject
advapi32
RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
gdiplus
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipBitmapLockBits
GdipCloneImage
GdipDrawImageI
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
ole32
CoTaskMemAlloc
CoAllowSetForegroundWindow
CoCreateFreeThreadedMarshaler
CoTestCancel
CoInitialize
CoTaskMemFree
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ