Static task
static1
Behavioral task
behavioral1
Sample
bc76dd1b1032f4ff165b6494718bc074a345edb80401944917e25762fa15be53.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc76dd1b1032f4ff165b6494718bc074a345edb80401944917e25762fa15be53.dll
Resource
win10v2004-20220901-en
General
-
Target
bc76dd1b1032f4ff165b6494718bc074a345edb80401944917e25762fa15be53
-
Size
370KB
-
MD5
e32011513409019d37826281a99fd4c3
-
SHA1
007342b934e2a3a2a7f459e91d92dfa04c5ec8e2
-
SHA256
bc76dd1b1032f4ff165b6494718bc074a345edb80401944917e25762fa15be53
-
SHA512
1b4bf8ade3d770ef89749b4460de733528470832be01b2496d11d6e787c76815e515248bfc400b01613d9ca76c8dfab59ff63aa6f7fd2e175392bec47c28d528
-
SSDEEP
6144:wdRw3P1UvOYjWOaoHeAjwSLVTFoWP/CjTvsK1yv0fc0Y1hll8NHmPxr1XaP++Za:KQ2ko+AjTLVTFoyaz1W0mf/AHmPFya
Malware Config
Signatures
Files
-
bc76dd1b1032f4ff165b6494718bc074a345edb80401944917e25762fa15be53.dll windows x86
c2cb63973041db848e06ecf594bbde6d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExW
RegQueryInfoKeyA
RegFlushKey
RegEnumKeyExW
RegLoadKeyA
RegCreateKeyExA
RegQueryValueExA
RegEnumValueW
RegReplaceKeyA
RegDeleteKeyW
RegCreateKeyW
RegLoadKeyW
RegEnumKeyA
RegQueryValueW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyA
RegFlushKey
RegCloseKey
RegDeleteValueA
RegQueryValueExW
RegCreateKeyW
RegOpenKeyW
RegCreateKeyExA
RegDeleteKeyA
RegReplaceKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueW
RegQueryValueA
RegLoadKeyA
RegCloseKey
RegQueryInfoKeyW
RegCreateKeyW
RegEnumKeyW
RegReplaceKeyW
RegGetKeySecurity
RegQueryValueW
RegQueryInfoKeyA
RegEnumKeyExW
RegEnumKeyExA
RegLoadKeyW
RegEnumValueW
RegDeleteValueW
RegQueryValueExA
RegEnumValueA
RegReplaceKeyA
RegDeleteKeyA
RegDeleteKeyA
RegCreateKeyW
RegReplaceKeyA
RegCreateKeyExA
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExW
RegQueryValueW
RegQueryValueA
RegLoadKeyA
RegFlushKey
RegEnumValueA
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyW
RegLoadKeyW
RegOpenKeyA
RegQueryValueExW
RegQueryInfoKeyA
RegDeleteValueW
RegQueryValueW
RegEnumKeyExA
RegEnumKeyExW
RegOpenKeyExA
RegReplaceKeyW
RegDeleteKeyW
RegGetKeySecurity
RegCloseKey
RegEnumValueW
RegDeleteValueA
RegQueryValueExA
RegCreateKeyW
user32
AppendMenuW
GetCursor
DrawTextA
IsWindow
GetWindow
GetDlgItem
DialogBoxParamA
CloseWindow
GetMenu
DrawIconEx
CreateIcon
LoadCursorA
IsMenu
GetFocus
BlockInput
DialogBoxParamW
CopyIcon
CopyImage
GetWindowTextLengthA
DrawTextW
CopyImage
GetFocus
GetWindow
EndDialog
GetWindowTextLengthA
CalcMenuBar
IsWindow
AppendMenuW
LoadMenuA
DrawTextA
AppendMenuA
IsMenu
DrawIcon
BlockInput
CloseWindow
DrawIconEx
DialogBoxParamA
DrawTextW
IsWindow
GetCursor
DialogBoxParamW
GetWindow
AlignRects
DrawIcon
LoadCursorA
AppendMenuA
IsMenu
AppendMenuW
GetWindow
CloseWindow
DialogBoxParamW
AppendMenuW
CopyIcon
CalcMenuBar
InsertMenuA
CopyRect
BlockInput
CreateIcon
DialogBoxParamA
CopyImage
DrawTextA
Sections
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 822B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 351KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.b8753 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ