_ReplyMessageReplyMessageReplyMessage@0
Static task
static1
Behavioral task
behavioral1
Sample
b1117e1fe3b50f48aa376aa937faf14a6e6b20b06b3e46ef5f42824b8d504d4c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b1117e1fe3b50f48aa376aa937faf14a6e6b20b06b3e46ef5f42824b8d504d4c.dll
Resource
win10v2004-20220812-en
General
-
Target
b1117e1fe3b50f48aa376aa937faf14a6e6b20b06b3e46ef5f42824b8d504d4c
-
Size
190KB
-
MD5
c3aaf44a91bb39bebf430a06a35a76b5
-
SHA1
e83bbd6a84bf7162e8628936fd935410741898ed
-
SHA256
b1117e1fe3b50f48aa376aa937faf14a6e6b20b06b3e46ef5f42824b8d504d4c
-
SHA512
8b11db1f69a8cc91b65e2d1f78180f50b52ddcb9c92783f7ac77479094a5bafb3887bc51a1e8bcfc19f3268de2fd9e0772b76218356094af440919df4d4e8000
-
SSDEEP
3072:h9DCHUYzhKHu/PkuHCiAqAs05bhpEmd4yZjKcBA61fw6lKTfffdc9:7CHNKHu/cuijsqb7VZ2cqQwTfW
Malware Config
Signatures
Files
-
b1117e1fe3b50f48aa376aa937faf14a6e6b20b06b3e46ef5f42824b8d504d4c.dll windows x86
1c2f1ea50b157107a28126db81c7b937
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsA
kernel32
SetTimerQueueTimer
CopyFileW
GetCommProperties
IsDBCSLeadByteEx
VirtualProtect
FormatMessageA
FindResourceExA
CreateSemaphoreA
user32
IsCharAlphaW
PostMessageA
OemToCharBuffA
PeekMessageA
LookupIconIdFromDirectory
DestroyIcon
CreateDialogParamW
SendMessageW
msvcrt
_cexit
_exit
__p__fmode
fputs
__setusermatherr
iswctype
_XcptFilter
__p__commode
fgetc
__set_app_type
_controlfp
_initterm
wcstol
_ismbblead
exit
strstr
_amsg_exit
__getmainargs
calloc
Exports
Exports
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ