Static task
static1
Behavioral task
behavioral1
Sample
87f3e1422c7ba00d66e645ff4dd9a7d2ffd2a4982f7163f7bd9d1ffc253f614d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87f3e1422c7ba00d66e645ff4dd9a7d2ffd2a4982f7163f7bd9d1ffc253f614d.dll
Resource
win10v2004-20221111-en
General
-
Target
87f3e1422c7ba00d66e645ff4dd9a7d2ffd2a4982f7163f7bd9d1ffc253f614d
-
Size
36KB
-
MD5
7644e3c77b2b8e9a5f4d02b8c5c83365
-
SHA1
533064d5fedfa71a08e47e4a28a1c591a872721a
-
SHA256
87f3e1422c7ba00d66e645ff4dd9a7d2ffd2a4982f7163f7bd9d1ffc253f614d
-
SHA512
3a068cac94a6f6351a6f991a987c9b15c00bffaec5c5078025788b17dffab1028ce4fca27f6ba180f3710182e090baadac4f7427f4c8c16a737747722254d58a
-
SSDEEP
384:0BRdnvlp7+JIUXHu5OVo7regRDkoTbr98wfBeL/PS1GSxkX8kLU9DFWP+sWGwvkY:0rd7mo7lkYbxBqi1PxkMkLGQwga
Malware Config
Signatures
Files
-
87f3e1422c7ba00d66e645ff4dd9a7d2ffd2a4982f7163f7bd9d1ffc253f614d.dll windows x86
820a4730d93a41d4440f2d77a854e4dd
Code Sign
73:c5:c1:37:ed:ea:1d:46:b1:39:97:29:6a:94:56:0cCertificate
IssuerCN=Root AgencyNot Before08/12/2009, 07:43Not After31/12/2039, 23:59SubjectCN=Windows CorporationSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
InterlockedIncrement
lstrlenA
GetModuleFileNameA
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
FlushInstructionCache
GetCurrentProcess
GetTickCount
Sleep
lstrcatA
LoadLibraryA
GetFileAttributesA
GetWindowsDirectoryA
GetShortPathNameA
DebugBreak
OutputDebugStringA
lstrcpynW
lstrcpynA
GetProcAddress
GetVersionExA
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
GetSystemDirectoryA
user32
DestroyMenu
GetMenuItemInfoA
AppendMenuA
GetMenuItemCount
CreatePopupMenu
TrackPopupMenuEx
GetMonitorInfoA
MonitorFromPoint
IsWindow
MapWindowPoints
MessageBeep
RemoveMenu
CallWindowProcA
GetWindowLongA
GetTopWindow
GetClassNameA
GetParent
GetWindow
PtInRect
InvalidateRect
DispatchMessageA
TranslateMessage
GetMessageA
CharNextA
SetWindowPos
SendMessageA
GetWindowTextA
GetCursorPos
GetWindowRect
SetCursorPos
mouse_event
KillTimer
PostMessageA
GetLastInputInfo
SetTimer
DefWindowProcA
TranslateAcceleratorA
GetClassInfoExA
LoadCursorA
wsprintfA
LoadImageA
RegisterClassExA
SetWindowLongA
CreateWindowExA
LoadStringA
LoadMenuA
SetFocus
PostQuitMessage
wvsprintfA
GetClientRect
LoadAcceleratorsA
DestroyWindow
FindWindowA
ShowWindow
PeekMessageA
LoadStringW
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
shell32
ShellExecuteA
ole32
OleUninitialize
OleInitialize
msvcrt
atoi
isdigit
wcslen
strstr
time
_initterm
??2@YAPAXI@Z
memmove
realloc
__CxxFrameHandler
strrchr
??3@YAXPAX@Z
free
_except_handler3
malloc
_adjust_fdiv
_purecall
Exports
Exports
Aetxml
BetDml
DllRundll
SetDaa
setxml
sssweew
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 732B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ