PluginMain
Static task
static1
Behavioral task
behavioral1
Sample
4c2aca13c6376e34f1e11e6867edb920c6b9a00cda7544d1784fcf3997437258.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4c2aca13c6376e34f1e11e6867edb920c6b9a00cda7544d1784fcf3997437258.dll
Resource
win10v2004-20221111-en
General
-
Target
4c2aca13c6376e34f1e11e6867edb920c6b9a00cda7544d1784fcf3997437258
-
Size
643KB
-
MD5
05e6408a8e2a9792bc95958e310b4841
-
SHA1
a5e380139d90248dec35f9374c087787140e1a28
-
SHA256
4c2aca13c6376e34f1e11e6867edb920c6b9a00cda7544d1784fcf3997437258
-
SHA512
87090ae886bfed8b071b86b18adb3d19c10a724fd810ed86958ea6affcc30c4f15674e1694d2dbb22f283cbf5a0b28f65ccd1dd805239630d73b3408aa98c413
-
SSDEEP
12288:qOqezqK+wXdl1er8W8OHUqtekfA86adRTKP3nhDNG:qh41LaU6nKPXhDNG
Malware Config
Signatures
Files
-
4c2aca13c6376e34f1e11e6867edb920c6b9a00cda7544d1784fcf3997437258.dll windows x86
ba89ef050faf3a470304cc39d5d51a63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetIcon
ImageList_GetImageCount
ord17
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
GetSystemTimeAsFileTime
RaiseException
HeapFree
GetCommandLineA
GetLocalTime
HeapAlloc
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
IsDebuggerPresent
HeapDestroy
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
ReadFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
InterlockedIncrement
GetModuleHandleW
GlobalFlags
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
FormatMessageA
LocalFree
GlobalFree
FreeResource
CreateFileA
WriteFile
CloseHandle
GetWindowsDirectoryA
LoadLibraryExA
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteFileA
MultiByteToWideChar
IsBadStringPtrA
IsBadReadPtr
lstrcmpiA
MulDiv
GetVersionExA
CopyFileA
GetLastError
SetLastError
GetModuleHandleA
OutputDebugStringA
GetProcAddress
FreeLibrary
SetEnvironmentVariableW
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
HeapCreate
user32
TrackPopupMenu
GetKeyState
SetMenu
GetScrollRange
SetForegroundWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
GetScrollInfo
SetWindowPlacement
GetDlgCtrlID
GetMenu
SetWindowPos
IsIconic
GetWindowPlacement
GetWindowTextLengthA
GetScrollPos
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
SetPropA
GetPropA
RemovePropA
CallWindowProcA
IsZoomed
FillRect
CreateIconIndirect
GetIconInfo
DestroyIcon
DestroyCursor
CopyIcon
SystemParametersInfoA
LoadImageA
IsCharAlphaA
IsCharAlphaNumericA
LoadMenuA
GetSubMenu
GetFocus
GetTopWindow
IsMenu
AdjustWindowRectEx
IsWindowVisible
GetWindowRgn
SetWindowLongA
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
GetSysColor
GetClassInfoA
DefWindowProcA
GetWindowTextA
GetWindowRect
GetMenuItemCount
GetMenuItemID
GetMenuState
ClientToScreen
GetParent
ChildWindowFromPoint
IsWindowEnabled
GetSystemMetrics
GetWindowLongA
IsWindow
GetCursorPos
LoadCursorA
SetCursor
GetClassNameA
WindowFromPoint
ReleaseDC
GetDC
ScreenToClient
SetWindowRgn
EqualRect
CopyRect
OffsetRect
SetRectEmpty
SetRect
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
PtInRect
IsRectEmpty
LoadAcceleratorsA
DestroyAcceleratorTable
TranslateAcceleratorA
GetDlgItem
LoadIconA
KillTimer
SetTimer
RedrawWindow
InvalidateRect
UpdateWindow
EndPaint
BeginPaint
MapWindowPoints
GetClientRect
SendMessageA
EnableWindow
GetSysColorBrush
UnregisterClassA
DestroyMenu
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
SetParent
TabbedTextOutA
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
SetFocus
PostMessageA
gdi32
SetBkMode
GetTextMetricsA
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPoint32A
SetTextJustification
LineTo
MoveToEx
CreatePen
TextOutA
GetObjectA
StretchBlt
CreateBitmap
CreateDIBSection
CreateRectRgnIndirect
GetClipBox
SaveDC
RestoreDC
SetMapMode
DPtoLP
SetTextColor
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
SetBkColor
SetRectRgn
OffsetRgn
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CombineRgn
BitBlt
CreateSolidBrush
FillRgn
SelectClipRgn
FrameRgn
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
StretchDIBits
DeleteDC
DeleteObject
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegQueryValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegCloseKey
shell32
ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFolderPathA
shlwapi
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathAppendA
ole32
OleInitialize
CoTaskMemFree
OleUninitialize
CoInitializeEx
CoUninitialize
CoCreateInstance
oleaut32
VariantInit
VariantChangeType
VariantClear
urlmon
URLDownloadToCacheFileA
wininet
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
Exports
Exports
Sections
.text Size: 434KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ