rPqih_Ejw
Static task
static1
Behavioral task
behavioral1
Sample
880a979ef8a6ea65ab3c2a4c0cf57b9a8a10e11e529c57f5be92c1d2fb39ac1a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
880a979ef8a6ea65ab3c2a4c0cf57b9a8a10e11e529c57f5be92c1d2fb39ac1a.dll
Resource
win10v2004-20221111-en
General
-
Target
880a979ef8a6ea65ab3c2a4c0cf57b9a8a10e11e529c57f5be92c1d2fb39ac1a
-
Size
164KB
-
MD5
80d9db9d60e6423dea843775ee4ce39f
-
SHA1
fc4023fab397ac1d6f28055f52037e45bd5ad789
-
SHA256
880a979ef8a6ea65ab3c2a4c0cf57b9a8a10e11e529c57f5be92c1d2fb39ac1a
-
SHA512
984254955b58d9a02960d345df56d6581a8abe0aa808b31e931c81d659c8c972ffb0b91e23764fbd882beff622f46abbb70b8f8a8cc3ff5477c801ba128d7304
-
SSDEEP
1536:PGvYsFkmMKxMVf7tqnbSoc5J8ZQVtt+bxKm0lfHFKjWem44j6klCzUzE:eYsF3MKxOf1vvttQAl/FKjWo4jjlyE
Malware Config
Signatures
Files
-
880a979ef8a6ea65ab3c2a4c0cf57b9a8a10e11e529c57f5be92c1d2fb39ac1a.dll windows x86
00748c9b7eb00865af3b9267985ad635
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongW
GetWindowLongW
DefWindowProcW
PostQuitMessage
TranslateMessage
DestroyWindow
MoveWindow
CloseWindow
SetWindowLongA
CreateWindowExA
DispatchMessageW
ShowWindow
PeekMessageW
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseFontW
ChooseFontA
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ole32
CreateBindCtx
StringFromIID
CoTaskMemFree
StringFromGUID2
IIDFromString
CoCreateInstance
CLSIDFromString
CoCreateFreeThreadedMarshaler
StringFromCLSID
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ