?CheckMenuRadioItemJ@@YGKPA_WK@Z
Static task
static1
Behavioral task
behavioral1
Sample
280cbb27167e2428e4923879851497fe941be6c52f370819de5ff63ffbb46d5a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
280cbb27167e2428e4923879851497fe941be6c52f370819de5ff63ffbb46d5a.dll
Resource
win10v2004-20220812-en
General
-
Target
280cbb27167e2428e4923879851497fe941be6c52f370819de5ff63ffbb46d5a
-
Size
122KB
-
MD5
9f5aeac6117620f3f456c502aca6d210
-
SHA1
6bae13706deec1c1230e80abad0f5b2feb77b2f7
-
SHA256
280cbb27167e2428e4923879851497fe941be6c52f370819de5ff63ffbb46d5a
-
SHA512
2e53dfed6d2d9181a64c41e38a46ffce0c9e3a259e009af057349aa0302fe5d3bde73238682307718beabefbd8a4f9c01ffc2faa6458341128b6ea853a713be8
-
SSDEEP
3072:lSwB/eFktLLAc6oo/WAEguLTK2pg7E79i:AwBm60DelgjdQ7U
Malware Config
Signatures
Files
-
280cbb27167e2428e4923879851497fe941be6c52f370819de5ff63ffbb46d5a.dll windows x86
b3e19090f6a0ff939c26edda57919c05
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord176
ord9
ord3
kernel32
OpenFile
FindFirstChangeNotificationW
LocalFree
UnmapViewOfFile
SetNamedPipeHandleState
FindNextChangeNotification
GetTimeFormatA
CallNamedPipeW
CreateMailslotW
SearchPathA
GetSystemTime
GlobalMemoryStatus
GetCommandLineW
TlsSetValue
MoveFileA
lstrcmpA
WaitForSingleObjectEx
ResumeThread
TerminateThread
SetUnhandledExceptionFilter
IsValidLocale
DeleteFileA
GlobalGetAtomNameW
GetSystemInfo
FileTimeToSystemTime
SetFilePointer
FindClose
LCMapStringA
SearchPathW
lstrcmpiA
WaitCommEvent
DisconnectNamedPipe
GetHandleInformation
LocalLock
CreatePipe
CompareFileTime
HeapLock
SetThreadAffinityMask
GetModuleFileNameA
FindResourceExW
GetNumberFormatW
MultiByteToWideChar
HeapFree
FormatMessageW
DeviceIoControl
GetCommProperties
GlobalUnlock
ConnectNamedPipe
LoadLibraryA
GetCurrentThreadId
LoadLibraryW
GetCommConfig
LocalAlloc
PulseEvent
GlobalHandle
EnumResourceLanguagesA
RtlUnwind
FindResourceW
GetFileAttributesExW
UnlockFile
lstrcpyA
RemoveDirectoryA
AddAtomW
GetCommTimeouts
InitializeCriticalSection
SizeofResource
SetErrorMode
EnumResourceNamesW
GetACP
GetFullPathNameW
GetLastError
HeapWalk
CopyFileW
GetWindowsDirectoryA
CreateNamedPipeA
OpenSemaphoreW
LocalSize
LoadLibraryExW
GetFileAttributesA
FormatMessageA
DefineDosDeviceW
SetSystemTime
GetThreadContext
SetCommBreak
GetFileSize
ClearCommError
RegisterWaitForSingleObject
GetLocalTime
MoveFileExA
CloseHandle
ConvertDefaultLocale
GlobalSize
GetStdHandle
IsDBCSLeadByte
EnumResourceNamesA
CreateRemoteThread
SetHandleInformation
GetSystemTimeAdjustment
GetSystemDefaultUILanguage
SetHandleCount
EnumSystemLocalesA
SetThreadLocale
GetTempFileNameW
SetWaitableTimer
QueryDosDeviceW
IsBadReadPtr
SetSystemTimeAdjustment
GetComputerNameExA
FreeLibrary
GlobalReAlloc
HeapUnlock
SetThreadExecutionState
SetThreadPriority
HeapCreate
MoveFileW
HeapReAlloc
DeleteAtom
AreFileApisANSI
VirtualFree
SetPriorityClass
LoadResource
lstrcpynA
HeapValidate
WriteFile
GetAtomNameA
GetBinaryTypeA
GetModuleHandleA
lstrcmpW
FileTimeToDosDateTime
SetFileAttributesA
CreateFileW
GetVersion
GetLocaleInfoA
GetComputerNameW
GetFullPathNameA
CompareStringA
TransactNamedPipe
GetSystemTimeAsFileTime
lstrcpyW
OpenEventW
DuplicateHandle
GetOverlappedResult
CreateFileMappingW
LocalUnlock
GetNumberFormatA
lstrcpynW
LocalReAlloc
GetDateFormatW
GetCommState
Exports
Exports
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 841B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data_v Size: - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ