?GetForegroundWindowGetForegroundWindowGetForegroundWindowGetForegroundWindowGetForegroundWindow@@YGKXZjPfiGVmyVLRfDZdbJTezUnXwjEipYvwgriewiturkljfgjkdljkgfdljhgiopfgoufdoigjfdoijhgoifljhioldjfglhkjdgflkg
Static task
static1
Behavioral task
behavioral1
Sample
bd610f85a960c4f6ff2134904bc2a81118d47e03c598845652dbe81dfbdc5ff6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd610f85a960c4f6ff2134904bc2a81118d47e03c598845652dbe81dfbdc5ff6.dll
Resource
win10v2004-20220812-en
General
-
Target
bd610f85a960c4f6ff2134904bc2a81118d47e03c598845652dbe81dfbdc5ff6
-
Size
192KB
-
MD5
92c818bf08b7474b5e8deaa63d69fe45
-
SHA1
3d94529a95d62f95e23830b4bccbd268d856e1bf
-
SHA256
bd610f85a960c4f6ff2134904bc2a81118d47e03c598845652dbe81dfbdc5ff6
-
SHA512
b63a40e5b9a7cc7eea2e64febff9482551ad20a1237cb3cedc5157ef7fc85dc034b9bbfdedc17e55ae49689fba939ba774f48c41e8d9668d1912467b0593a422
-
SSDEEP
3072:s0cwU3pLEOiqyMBssZDb2OfZnMkb87ryOIZtQasZtdYFfRmuTVcO1/50tGkFvu:Pd/oF9MkQ/DotkZtOvEGSv
Malware Config
Signatures
Files
-
bd610f85a960c4f6ff2134904bc2a81118d47e03c598845652dbe81dfbdc5ff6.dll windows x86
00aa4e8eed777d74e9fb4225e1b28425
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePatternBrush
GetPixel
CreateHatchBrush
GetNearestPaletteIndex
EnumFontFamiliesW
CreateRectRgn
GetLayout
CreateRectRgnIndirect
advapi32
OpenBackupEventLogA
ole32
CoCreateGuid
user32
BeginDeferWindowPos
DefMDIChildProcW
TrackPopupMenu
SetScrollRange
OpenDesktopW
GetFocus
CopyRect
LoadBitmapA
GetKBCodePage
DialogBoxParamA
EnumChildWindows
GetAsyncKeyState
FindWindowW
MessageBoxIndirectA
kernel32
CancelWaitableTimer
lstrcpyW
IsBadStringPtrW
RaiseException
GlobalLock
GetStringTypeExW
GlobalFindAtomA
GetFullPathNameW
Exports
Exports
Sections
.dbgdir Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.poiujh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mytrrg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oiuuyt Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retf Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mnbhg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ