Static task
static1
Behavioral task
behavioral1
Sample
b990354f77715b1cc34cddabbf844d4f2fdfc2d6ebabdc60749f7b5d0e37d6d0.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b990354f77715b1cc34cddabbf844d4f2fdfc2d6ebabdc60749f7b5d0e37d6d0.dll
Resource
win10v2004-20220901-en
General
-
Target
b990354f77715b1cc34cddabbf844d4f2fdfc2d6ebabdc60749f7b5d0e37d6d0
-
Size
170KB
-
MD5
24a30583125735081f14fed5ae8e2740
-
SHA1
42e769a1615ece64f97ff8c385f3fd418d50fa9e
-
SHA256
b990354f77715b1cc34cddabbf844d4f2fdfc2d6ebabdc60749f7b5d0e37d6d0
-
SHA512
f0a7e81b1b697a311e79287741ea0fb344e44dc221ae03061663ec1fbde9d73f29e6966376e1d99bf35885fa75c9d2e86850d7839a9a9c6fae323999a25e2079
-
SSDEEP
3072:GiyMUzXfa49RkpzmiEtQhN1UiuOM7pCSeB0TuiqpEX:GnzXfnkpS0XuQtB0Tute
Malware Config
Signatures
Files
-
b990354f77715b1cc34cddabbf844d4f2fdfc2d6ebabdc60749f7b5d0e37d6d0.dll windows x86
66958e4087a111b5e6d7642b0db4ba30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
CloseHandle
VirtualAlloc
CreateFileA
GetStartupInfoA
lstrlenW
SetLastError
SetCurrentDirectoryW
RemoveDirectoryW
OutputDebugStringA
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
GlobalAlloc
GetWindowsDirectoryW
GetProcAddress
GetPrivateProfileIntW
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetFileAttributesW
GetCurrentDirectoryW
FreeLibrary
FindClose
CreateProcessW
CreateFileW
user32
GetWindowLongW
GetWindowRect
GetWindowTextW
InflateRect
InvalidateRect
IsChild
IsDlgButtonChecked
IsRectEmpty
IsWindowEnabled
IsWindowVisible
LoadAcceleratorsW
GetWindow
LoadIconW
LoadImageW
LoadStringA
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterClassExW
RegisterClassW
ReleaseDC
SendDlgItemMessageW
SendMessageA
SendMessageW
SetCursor
SetFocus
SetForegroundWindow
SetMessageQueue
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
TranslateAcceleratorW
TranslateMessage
UnregisterClassW
UpdateWindow
WaitMessage
wsprintfA
wsprintfW
GetUpdateRect
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetShellWindow
GetParent
GetNextDlgTabItem
GetMessageW
GetLastActivePopup
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetClientRect
GetClassNameA
GetClassInfoW
FindWindowW
FillRect
ExitWindowsEx
EnumThreadWindows
EnumChildWindows
EndPaint
EndDialog
EnableWindow
DrawTextW
DrawIcon
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DestroyWindow
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreateMenu
CreateDialogParamW
CopyRect
CheckRadioButton
CheckDlgButton
CharPrevW
CharNextW
CallWindowProcW
BringWindowToTop
BeginPaint
LoadCursorW
gdi32
PlayEnhMetaFile
DeleteEnhMetaFile
StretchBlt
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
GetTextMetricsW
BitBlt
GetObjectW
GetMapMode
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
DPtoLP
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
advapi32
OpenProcessToken
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
shell32
Shell_NotifyIconA
shlwapi
PathFindFileNameA
PathQuoteSpacesA
PathRemoveFileSpecA
PathAppendA
SHRegGetBoolUSValueA
StrCpyNW
StrStrIA
wnsprintfA
SHGetValueA
msvcrt
_except_handler3
_vsnwprintf
_wmakepath
_wsplitpath
_wtoi
free
malloc
memmove
setlocale
swscanf
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ