Static task
static1
Behavioral task
behavioral1
Sample
71729f943336943b96c26f584c751e71f5df9ed8370151f5fafbffdf7fd759b6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
71729f943336943b96c26f584c751e71f5df9ed8370151f5fafbffdf7fd759b6.dll
Resource
win10v2004-20220901-en
General
-
Target
71729f943336943b96c26f584c751e71f5df9ed8370151f5fafbffdf7fd759b6
-
Size
180KB
-
MD5
f1f74630b4ef1ccf628f4cdffdd47978
-
SHA1
0148f295f02832ea633fc11c952cb4129158c687
-
SHA256
71729f943336943b96c26f584c751e71f5df9ed8370151f5fafbffdf7fd759b6
-
SHA512
876ccc681600eec2dc134115e9a6397069aa42c1393d8c30267c8a1e96e12deb7f8f7c92037f2d2952bc7f3337bb6fcc14f46bc76f5dec787bf325aec1bbb5e5
-
SSDEEP
3072:QIcNNyZF8R2IvsWeXaAVKM1jtTuTvNfLobo9thuLDzxo8xNCs:bgwWR2Iv4VVFiBLkIOLX9HC
Malware Config
Signatures
Files
-
71729f943336943b96c26f584c751e71f5df9ed8370151f5fafbffdf7fd759b6.dll windows x86
8326bceced338ef587afb4c54f280dfe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
VirtualAlloc
user32
ShowWindow
gdi32
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreatePolygonRgn
CreateSolidBrush
DeleteDC
DeleteObject
BitBlt
EnableEUDC
EnumFontFamiliesW
ExtTextOutW
FillRgn
GetBitmapBits
GetFontData
GetObjectW
GetRgnBox
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
Ellipse
PatBlt
Rectangle
SelectObject
SetBitmapBits
SetBkColor
SetTextColor
StretchBlt
OffsetRgn
comdlg32
GetSaveFileNameW
GetOpenFileNameW
ChooseFontW
advapi32
RegOpenKeyExW
shell32
ShellAboutW
imm32
ImmRegisterWordW
ImmSetCompositionStringW
ImmSetConversionStatus
ImmIsIME
ImmGetConversionStatus
ImmGetCompositionStringW
ImmAssociateContext
ImmConfigureIMEW
ImmCreateContext
ImmDestroyContext
ImmEnumRegisterWordW
ImmEscapeW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444449 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444448 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444447 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444446 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444445 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444444 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ