RRIQL
Static task
static1
Behavioral task
behavioral1
Sample
34adcaa56af31aed598a3cdb3bc356542e2858dc1e4e96b72d721eb1f218cef1.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
34adcaa56af31aed598a3cdb3bc356542e2858dc1e4e96b72d721eb1f218cef1.dll
Resource
win10v2004-20221111-en
General
-
Target
34adcaa56af31aed598a3cdb3bc356542e2858dc1e4e96b72d721eb1f218cef1
-
Size
564KB
-
MD5
2f2f8cbef758f83020ea03ee6a2cdab0
-
SHA1
a68bd19a527eff391aff8099453ef656a976e8ec
-
SHA256
34adcaa56af31aed598a3cdb3bc356542e2858dc1e4e96b72d721eb1f218cef1
-
SHA512
81f72650e511988e0ac1015d1f7ead4bdab3fde52c39ab2a3694d27bf6ae6ab389ae855a0186ade732fc633359ed1271b94ed01beba9c9f680161a048d875871
-
SSDEEP
12288:0eor4qMmjGW52d7bMBa+q1Z2v6ypzRz6Td6OvmKW7RkJn:0eor9MYV5i7Oiix1Rz6TonVtkJ
Malware Config
Signatures
Files
-
34adcaa56af31aed598a3cdb3bc356542e2858dc1e4e96b72d721eb1f218cef1.dll windows x86
bf84eb251ba579a9cdb495565b3a51bf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalAlloc
SetFilePointer
CreateFileA
LeaveCriticalSection
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
lstrcpyA
CreateFileMappingA
FreeLibrary
GetModuleHandleA
DisableThreadLibraryCalls
GetCurrentProcessId
VirtualAlloc
WriteProcessMemory
GetModuleFileNameA
CloseHandle
VirtualProtect
user32
GetWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindow
GetTopWindow
CallNextHookEx
GetKeyState
RegisterClassExA
GetClassNameA
GetClassInfoExA
SetParent
MapWindowPoints
SetWindowPos
OpenClipboard
ShowWindow
CloseClipboard
SendDlgItemMessageA
wsprintfA
GetDlgItemTextA
SetDlgItemTextA
IsDlgButtonChecked
CheckDlgButton
EnableWindow
SetWindowTextA
DestroyWindow
PostQuitMessage
GetWindowTextA
KillTimer
GetDlgItem
SendMessageA
SetClipboardData
GetWindowRect
EmptyClipboard
advapi32
RegSetValueExA
RegOpenKeyA
RegCloseKey
comctl32
ord17
msvcrt
free
strstr
atoi
_beginthread
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
_adjust_fdiv
_itoa
_initterm
shlwapi
PathFindFileNameA
Exports
Exports
Sections
.RRIQLP Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text0 Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ