?GetForegroundWindowGetForegroundWindowGetForegroundWindowGetForegroundWindowGetForegroundWindow@@YGKXZjPfiGVmyVLRfDZdbJTezUnXwjEipYvwgriewiturkljfgjkdljkgfdljhgiopfgoufdoigjfdoijhgoifljhioldjfglhkjdgflkg
Static task
static1
Behavioral task
behavioral1
Sample
e36eb5a4856a54afcaa12d445a13b8763455fb844651a1773cf953cb60144783.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e36eb5a4856a54afcaa12d445a13b8763455fb844651a1773cf953cb60144783.dll
Resource
win10v2004-20220812-en
General
-
Target
e36eb5a4856a54afcaa12d445a13b8763455fb844651a1773cf953cb60144783
-
Size
213KB
-
MD5
14869ced7640eafaa8400a591b953a17
-
SHA1
a6daefa05a107a664bdaa6ea1afbb49536da3e45
-
SHA256
e36eb5a4856a54afcaa12d445a13b8763455fb844651a1773cf953cb60144783
-
SHA512
8a8d6cb49b61c3ba5b8bf1f478ebb6f2f9b65f400eae2913640db5e0f3582e60bfb7fbfe8a9ec4879574911918ae4f16e668f92db297cc8cf0fb4787944b2d9e
-
SSDEEP
3072:8KVhmEX6sQTJneYcC688LENJGw/hxZN6Q6o3HZvXRN8FLUX04IG9GOs/50tGkFsk:80h5Xj81nRbhxZv398FYX0pEGS
Malware Config
Signatures
Files
-
e36eb5a4856a54afcaa12d445a13b8763455fb844651a1773cf953cb60144783.dll windows x86
00aa4e8eed777d74e9fb4225e1b28425
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePatternBrush
GetPixel
CreateHatchBrush
GetNearestPaletteIndex
EnumFontFamiliesW
CreateRectRgn
GetLayout
CreateRectRgnIndirect
advapi32
OpenBackupEventLogA
ole32
CoCreateGuid
user32
BeginDeferWindowPos
DefMDIChildProcW
TrackPopupMenu
SetScrollRange
OpenDesktopW
GetFocus
CopyRect
LoadBitmapA
GetKBCodePage
DialogBoxParamA
EnumChildWindows
GetAsyncKeyState
FindWindowW
MessageBoxIndirectA
kernel32
CancelWaitableTimer
lstrcpyW
IsBadStringPtrW
RaiseException
GlobalLock
GetStringTypeExW
GlobalFindAtomA
GetFullPathNameW
Exports
Exports
Sections
.dbgdir Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.poiujh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mytrrg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oiuuyt Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retf Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mnbhg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ