Static task
static1
Behavioral task
behavioral1
Sample
847a740768455fa565428fa9a137d337639fe6158e8cad08bbc908d9982c3a6e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
847a740768455fa565428fa9a137d337639fe6158e8cad08bbc908d9982c3a6e.dll
Resource
win10v2004-20220901-en
General
-
Target
847a740768455fa565428fa9a137d337639fe6158e8cad08bbc908d9982c3a6e
-
Size
93KB
-
MD5
71f2dc38725a03c7c396ff2a6f1a2032
-
SHA1
d3a1496f6da158d5670690b0c63bc75aa0f27e17
-
SHA256
847a740768455fa565428fa9a137d337639fe6158e8cad08bbc908d9982c3a6e
-
SHA512
9446437dae408c8250a64fc762f33023e389e3321007d8f426fe1c552d0bfcc5f83cfea8c77adc29dabea2f41b640e0d39d21aeda39221c736bf5959ea16e536
-
SSDEEP
1536:/r7W8CUfUiVmis9DxsEb6fBa8ue0LXzT0MStWfcL7dSJNG3mnVvmxbW//:D7tCUfUiG9qE2Ba5HQdbjm6C/
Malware Config
Signatures
Files
-
847a740768455fa565428fa9a137d337639fe6158e8cad08bbc908d9982c3a6e.dll windows x86
d04c4ea8f2e5b3d0c53c697f219149c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcpynA
lstrcmpW
SetNamedPipeHandleState
SetLocaleInfoW
SetFileApisToOEM
SetErrorMode
SetComputerNameExW
SetCommConfig
SetCommBreak
RtlZeroMemory
PostQueuedCompletionStatus
IsDebuggerPresent
MapViewOfFileEx
LocalSize
LocalReAlloc
InterlockedDecrement
GlobalMemoryStatus
GlobalAlloc
GetTapePosition
GetProcessShutdownParameters
GetProcessHeaps
GetLargestConsoleWindowSize
GetDriveTypeW
GetDateFormatA
GetConsoleAliasesA
GetConsoleAliasExesLengthW
FindNextFileA
EnumResourceLanguagesA
DeleteTimerQueue
BuildCommDCBA
VirtualAlloc
GetSystemInfo
GetWindowsDirectoryA
lstrcpyA
lstrlenA
CreateFileA
user32
DefFrameProcA
DefMDIChildProcW
DeregisterShellHookWindow
DestroyCaret
DestroyIcon
DestroyMenu
DialogBoxIndirectParamA
DialogBoxParamA
DialogBoxParamW
DlgDirListA
DlgDirListW
DlgDirSelectComboBoxExW
DrawAnimatedRects
DrawFocusRect
DrawIcon
DefDlgProcW
DrawStateW
DrawTextExW
EnableMenuItem
EnableScrollBar
EnumChildWindows
EnumClipboardFormats
EnumDesktopWindows
EnumDesktopsW
EnumDisplaySettingsA
EnumDisplaySettingsExA
EnumDisplaySettingsW
EnumWindowStationsW
FillRect
FindWindowA
DefDlgProcA
DdeUninitialize
DdeUnaccessData
DdeSetQualityOfService
DdeQueryStringW
DdeQueryConvInfo
DdeInitializeW
DdeFreeStringHandle
DdeCreateStringHandleA
DdeConnect
FindWindowExW
DdeAddData
DdeAccessData
CreateWindowStationW
CreateWindowStationA
CreateWindowExW
CreatePopupMenu
CreateMDIWindowA
CreateIconIndirect
CreateIconFromResourceEx
CreateDialogParamW
CreateDialogParamA
CreateDialogIndirectParamW
CopyImage
CopyAcceleratorTableW
CloseWindow
ClipCursor
ChildWindowFromPointEx
ChildWindowFromPoint
CheckDlgButton
CharUpperW
CharUpperBuffW
CharUpperBuffA
CharUpperA
CharToOemW
CharPrevW
CharPrevA
CharNextW
CharNextExA
ChangeDisplaySettingsW
ChangeDisplaySettingsExA
ChangeDisplaySettingsA
CascadeWindows
CascadeChildWindows
BeginDeferWindowPos
AttachThreadInput
AppendMenuW
AnyPopup
AllowSetForegroundWindow
FlashWindow
FlashWindowEx
GetAltTabInfoW
GetClassInfoExW
GetClassInfoW
GetClientRect
GetClipboardFormatNameW
GetClipboardOwner
GetCursorPos
GetDesktopWindow
GetDlgItemInt
GetDlgItemTextA
GetDlgItemTextW
GetDoubleClickTime
GetForegroundWindow
GetGUIThreadInfo
GetGuiResources
GetKBCodePage
GetKeyNameTextA
GetKeyNameTextW
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetMenuStringA
GetMenuStringW
wvsprintfW
wsprintfW
wsprintfA
mouse_event
WaitForInputIdle
WINNLSGetEnableStatus
AdjustWindowRectEx
VkKeyScanExW
VkKeyScanExA
ValidateRgn
UserHandleGrantAccess
UpdateWindow
UnregisterClassW
UnregisterClassA
UnpackDDElParam
UnloadKeyboardLayout
UnionRect
UnhookWindowsHookEx
TranslateMDISysAccel
TranslateAcceleratorW
TranslateAccelerator
TrackPopupMenuEx
TrackPopupMenu
ToUnicodeEx
ToUnicode
TileChildWindows
SwitchDesktop
SwapMouseButton
SubtractRect
ShowWindowAsync
ShowOwnedPopups
ShowCaret
SetWindowWord
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowContextHelpId
SetShellWindow
SetScrollRange
SetScrollInfo
SetPropA
SetMessageQueue
SetMenuItemInfoW
SetMenuItemInfoA
SetMenuItemBitmaps
SetMenuContextHelpId
SetLastErrorEx
SetFocus
SetDlgItemInt
SetClipboardData
SetClassWord
SetCaretBlinkTime
SendNotifyMessageW
SendNotifyMessageA
SendMessageCallbackW
SendMessageCallbackA
SendDlgItemMessageA
ScrollWindow
ScrollDC
ReuseDDElParam
RegisterWindowMessageA
RegisterHotKey
RegisterClipboardFormatA
RegisterClassExW
RegisterClassExA
RedrawWindow
RealGetWindowClassA
RealGetWindowClass
PostThreadMessageW
PostMessageW
PostMessageA
PeekMessageW
OpenWindowStationW
OpenWindowStationA
OpenDesktopW
OpenClipboard
OemToCharBuffW
OemKeyScan
MonitorFromRect
ModifyMenuW
MessageBoxExW
MapDialogRect
LockWorkStation
LoadMenuW
LoadMenuA
LoadKeyboardLayoutW
LoadImageA
LoadIconW
LoadIconA
LoadCursorFromFileW
LoadCursorFromFileA
LoadCursorA
LoadBitmapW
KillTimer
IsZoomed
IsWindowEnabled
IsDlgButtonChecked
IsDialogMessageW
IsDialogMessageA
IsChild
IsCharUpperW
IsCharAlphaNumericA
IsCharAlphaA
InvalidateRect
IMPSetIMEA
IMPQueryIMEW
IMPQueryIMEA
IMPGetIMEA
HiliteMenuItem
HideCaret
GetWindowTextLengthA
GetWindowRect
GetWindowInfo
GetWindowDC
GetWindowContextHelpId
GetUpdateRgn
GetTitleBarInfo
GetTabbedTextExtentW
GetSubMenu
GetScrollPos
GetScrollInfo
GetQueueStatus
GetPropW
GetPropA
GetPriorityClipboardFormat
GetOpenClipboardWindow
GetNextDlgGroupItem
GetMouseMovePointsEx
GetMessageW
DrawIconEx
GetMessageExtraInfo
comdlg32
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
advapi32
RegOpenKeyW
ole32
WriteStringStream
WriteFmtUserTypeStg
WriteClassStm
WriteClassStg
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserFree
UtGetDvtd32Info
UtGetDvtd16Info
UtConvertDvtd32toDvtd16
UtConvertDvtd16toDvtd32
UpdateDCOMSettings
StringFromIID
StringFromCLSID
StgOpenStorageOnILockBytes
StgOpenStorageEx
StgIsStorageFile
StgGetIFillLockBytesOnFile
StgCreateStorageEx
StgCreatePropStg
StgCreateDocfileOnILockBytes
StgCreateDocfile
StgConvertVariantToProperty
StgConvertPropertyToVariant
SetDocumentBitStg
SetConvertStg
STGMEDIUM_UserUnmarshal
STGMEDIUM_UserMarshal
SNB_UserUnmarshal
ReleaseStgMedium
ReadStringStream
ReadOleStg
ReadFmtUserTypeStg
ReadClassStg
PropVariantCopy
PropStgNameToFmtId
ProgIDFromCLSID
OpenOrCreateStream
OleUninitialize
OleSetMenuDescriptor
OleSetContainedObject
OleSaveToStream
OleRegEnumVerbs
OleQueryLinkFromData
OleQueryCreateFromData
OleLockRunning
OleLoadFromStream
OleIsRunning
OleIsCurrentClipboard
OleInitializeWOW
OleInitialize
OleGetIconOfFile
OleGetIconOfClass
OleGetClipboard
OleFlushClipboard
OleDuplicateData
OleDraw
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleCreateLinkToFileEx
OleCreateLinkToFile
OleCreateLinkFromDataEx
OleCreateLinkFromData
OleCreateLinkEx
OleCreateFromFileEx
OleCreateFromFile
OleCreateFromDataEx
OleCreateEx
OleCreateDefaultHandler
OleConvertOLESTREAMToIStorageEx
OleConvertOLESTREAMToIStorage
OleConvertIStorageToOLESTREAM
OleBuildVersion
MonikerRelativePathTo
IIDFromString
HkOleRegisterObject
HWND_UserUnmarshal
HWND_UserSize
HWND_UserMarshal
HPALETTE_UserSize
HPALETTE_UserMarshal
HMETAFILE_UserUnmarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserFree
HMENU_UserUnmarshal
HMENU_UserSize
HMENU_UserMarshal
HMENU_UserFree
HICON_UserUnmarshal
HICON_UserSize
HICON_UserFree
HGLOBAL_UserUnmarshal
HGLOBAL_UserFree
HENHMETAFILE_UserUnmarshal
HDC_UserUnmarshal
HDC_UserSize
HDC_UserMarshal
HBRUSH_UserFree
HBITMAP_UserSize
HBITMAP_UserFree
HACCEL_UserUnmarshal
HACCEL_UserSize
HACCEL_UserMarshal
HACCEL_UserFree
GetHGlobalFromStream
GetHGlobalFromILockBytes
GetDocumentBitStg
GetClassFile
FmtIdToPropStgName
EnableHookObject
DllGetClassObjectWOW
DllDebugObjectRPCHook
DcomChannelSetHResult
CreateStreamOnHGlobal
CreateStdProgressIndicator
CreatePointerMoniker
CreateOleAdviseHolder
CreateObjrefMoniker
CreateItemMoniker
CreateILockBytesOnHGlobal
CreateGenericComposite
CreateFileMoniker
CreateClassMoniker
CreateAntiMoniker
CoWaitForMultipleHandles
CoUnmarshalInterface
CoUnloadingWOW
CoTestCancel
CoTaskMemRealloc
CoTaskMemAlloc
CoSwitchCallContext
CoSuspendClassObjects
CoSetCancelObject
CoRevokeMallocSpy
CoRevokeClassObject
CoRevertToSelf
CoResumeClassObjects
CoReleaseMarshalData
CoRegisterSurrogateEx
CoRegisterSurrogate
CoRegisterPSClsid
CoRegisterMallocSpy
CoRegisterClassObject
CoRegisterChannelHook
CoReactivateObject
CoQueryProxyBlanket
CoQueryClientBlanket
CoQueryAuthenticationServices
CoMarshalInterface
CoMarshalInterThreadInterfaceInStream
CoMarshalHresult
CoIsOle1Class
CoIsHandlerConnected
CoInitializeWOW
CoInitializeSecurity
CoInitialize
CoGetStdMarshalEx
CoGetStandardMarshal
CoGetPSClsid
CoGetObjectContext
CoGetObject
CoGetMarshalSizeMax
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoGetCurrentProcess
CoGetCurrentLogicalThreadId
CoGetClassVersion
CoGetClassObject
CoGetCancelObject
CoGetApartmentID
CoFreeLibrary
CoFreeAllLibraries
CoFileTimeNow
CoDisableCallCancellation
CoDeactivateObject
CoCreateObjectInContext
CoCreateInstance
CoCreateGuid
CoCreateFreeThreadedMarshaler
CoCancelCall
CoBuildVersion
CLSIDFromProgIDEx
CLIPFORMAT_UserSize
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserFree
BindMoniker
SNB_UserMarshal
HBRUSH_UserMarshal
oleaut32
VarCyFromI4
VarCyFromDisp
VarCyFromDec
VarCyFromBool
VarCyFix
VarCyCmpR8
VarCyCmp
VarCyAdd
VarCyAbs
VarCmp
VarCat
VarBstrFromUI2
VarBstrFromR8
VarBstrFromR4
VarBstrFromI2
VarBstrFromDisp
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarBstrFromBool
VarBstrCmp
VarBstrCat
VarBoolFromUI4
VarBoolFromUI2
VarBoolFromUI1
VarBoolFromR8
VarBoolFromR4
VarBoolFromI1
VarBoolFromDisp
VarBoolFromDec
VarBoolFromDate
VarBoolFromCy
VarAbs
VARIANT_UserUnmarshal
VARIANT_UserSize
VARIANT_UserMarshal
UnRegisterTypeLi
SystemTimeToVariantTime
SysReAllocString
SysAllocStringLen
SysAllocString
SetErrorInfo
SafeArrayUnlock
SafeArraySetIID
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetRecordInfo
SafeArrayGetLBound
SafeArrayGetIID
SafeArrayGetElemsize
SafeArrayGetElement
SafeArrayDestroyData
SafeArrayCreateVectorEx
SafeArrayCreateVector
SafeArrayCreate
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
RegisterActiveObject
QueryPathOfRegTypeLi
OleTranslateColor
OleLoadPictureFileEx
OleLoadPictureFile
OleLoadPicture
OleIconToCursor
OleCreatePropertyFrameIndirect
OleCreatePictureIndirect
OaBuildVersion
OACreateTypeLib2
LoadTypeLibEx
LoadTypeLi
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_Size
LPSAFEARRAY_Marshal
LHashValOfNameSysA
LHashValOfNameSys
GetRecordInfoFromTypeInfo
GetRecordInfoFromGuids
GetErrorInfo
GetAltMonthNames
GetActiveObject
DosDateTimeToVariantTime
DispInvoke
DispGetParam
DispGetIDsOfNames
DispCallFunc
CreateTypeLib2
CreateErrorInfo
CreateDispTypeInfo
BstrFromVector
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
VarCyFromR8
VarCyFromStr
VarCyFromUI2
VarCyFromUI4
VarCyInt
VarCyMul
VarCyMulI4
VarCySu
VarDateFromBool
VarDateFromDisp
VarDateFromR4
VarDateFromStr
VarDateFromUI1
VarDateFromUI2
VarDateFromUI4
VarDateFromUdateEx
VarDecFromBool
VarDecFromDisp
VarDecFromI4
VarDecFromR8
VarDecFromStr
VarDecFromUI2
VarDecFromUI4
VarDecMul
VarDecRound
VarDiv
VarEqv
VarFormat
VarFormatCurrency
VarFormatFromTokens
VarFormatPercent
VarI1FromCy
VarI1FromDisp
VarI1FromI2
VarI1FromI4
VarI1FromR4
VarI1FromUI2
VarI2FromDate
VarI2FromDec
VarI2FromDisp
VarI2FromR8
VarI2FromStr
VarI2FromUI1
VarI2FromUI2
VarI4FromDate
VarI4FromDisp
VarI4FromI1
VarI4FromR4
VarI4FromStr
VarI4FromUI1
VarI4FromUI2
VarIdiv
VarImp
VarInt
VarMod
VarMonthName
VarMul
VarNumFromParseNum
VarParseNumFromStr
VarR4FromBool
VarR4FromI1
VarR4FromI4
VarR4FromR8
VarR4FromUI2
VarR4FromUI4
VarR8FromBool
VarR8FromDate
VarR8FromDec
VarR8FromI1
VarR8FromI2
VarR8FromStr
VarR8FromUI1
VarR8FromUI2
VarR8FromUI4
VarR8Round
VarRound
VarSu
VarTokenizeFormatString
VarUI1FromDate
VarUI1FromDisp
VarUI1FromI1
VarUI1FromI2
VarUI1FromI4
VarUI1FromStr
VarUI1FromUI4
VarUI2FromBool
VarUI2FromDec
VarUI2FromI4
VarUI2FromR4
VarUI2FromStr
VarUI2FromUI4
VarUI4FromBool
VarUI4FromDate
VarUI4FromDec
VarUI4FromI1
VarUI4FromR8
VarUI4FromUI1
VarUI4FromUI2
VarUdateFromDate
VarWeekdayName
VarXor
VariantChangeTypeEx
VariantClear
VariantCopy
VariantCopyInd
VariantInit
VariantTimeToSystemTime
VarCyFromI2
comctl32
FlatSB_SetScrollProp
FlatSB_SetScrollRange
FlatSB_ShowScrollBar
ord4
GetMUILanguage
ImageList_Add
ImageList_AddIcon
ImageList_AddMasked
ImageList_BeginDrag
FlatSB_SetScrollPos
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_Copy
ImageList_GetImageInfo
ord8
CreatePropertySheetPage
CreatePropertySheetPageA
CreatePropertySheetPageW
ord6
CreateStatusWindowW
ord7
CreateToolbarEx
ord16
ord15
DrawStatusText
ord5
DrawStatusTextW
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollProp
_TrackMouseEvent
UninitializeFlatSB
ord3
PropertySheetW
PropertySheetA
PropertySheet
ord2
ord13
ord14
InitializeFlatSB
InitMUILanguage
InitCommonControlsEx
ord17
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_SetIconSize
ImageList_SetFilter
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Read
ImageList_Merge
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_LoadImage
ImageList_GetImageRect
ImageList_EndDrag
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetDragImage
ImageList_GetBkColor
FlatSB_GetScrollRange
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 186KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ