WinWIxx
Static task
static1
Behavioral task
behavioral1
Sample
751f414f45052762b1d60232bc0f02b65dd4af05240c8e5391a291072fbe2ab2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
751f414f45052762b1d60232bc0f02b65dd4af05240c8e5391a291072fbe2ab2.dll
Resource
win10v2004-20220812-en
General
-
Target
751f414f45052762b1d60232bc0f02b65dd4af05240c8e5391a291072fbe2ab2
-
Size
136KB
-
MD5
99b1bafdc7919580c3ef13ad1df7ab7e
-
SHA1
7ea36ea0eab05269bcadfc74dfaeb16278081790
-
SHA256
751f414f45052762b1d60232bc0f02b65dd4af05240c8e5391a291072fbe2ab2
-
SHA512
03ce6fcf298b11784c244f3fa8c2f0e1de97e6606191c29d341e6ea078a2a341061fd0761f56e2cab26d36329438fdc31636cd9c5ca4ee6029bf36c79cb7a358
-
SSDEEP
3072:Oavc7svx+EIvsDc1Pxr2n9Gi0ZP1gcFVt320OSFOqr:Oavc7VkDMhKGi0ZyItG0OSgq
Malware Config
Signatures
Files
-
751f414f45052762b1d60232bc0f02b65dd4af05240c8e5391a291072fbe2ab2.dll windows x86
b714c0f74d1fa71d2b6c5a8e447d98f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
UnmapViewOfFile
GetModuleFileNameA
InterlockedIncrement
ReleaseMutex
LeaveCriticalSection
OpenEventA
InterlockedDecrement
CreateProcessA
ExitProcess
EnterCriticalSection
CreateEventA
CreateDirectoryA
MapViewOfFile
SetLastError
lstrlenW
WaitForSingleObject
GetModuleHandleA
CopyFileA
GetLastError
LocalFree
GetTickCount
GetProcAddress
Sleep
GetCommandLineA
InterlockedCompareExchange
CloseHandle
LoadLibraryA
ole32
CoCreateGuid
OleCreate
OleSetContainedObject
CoInitialize
CoUninitialize
CreateBindCtx
user32
RegisterWindowMessageA
TranslateMessage
GetSystemMetrics
GetClassNameA
FindWindowA
SetWindowLongA
DefWindowProcA
SendMessageA
GetMessageA
PostMessageA
CreateWindowExA
KillTimer
SetTimer
DispatchMessageA
GetWindowLongA
GetParent
PostQuitMessage
DestroyWindow
oleaut32
SysAllocStringLen
SysAllocString
SysFreeString
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
Exports
Exports
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ