Static task
static1
Behavioral task
behavioral1
Sample
63c9261071b33f16c64892cef79842112c44bc27d71a497dced55e80998bc73d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
63c9261071b33f16c64892cef79842112c44bc27d71a497dced55e80998bc73d.dll
Resource
win10v2004-20221111-en
General
-
Target
63c9261071b33f16c64892cef79842112c44bc27d71a497dced55e80998bc73d
-
Size
86KB
-
MD5
251fa530cb3dd3a84429684b43b6c7f0
-
SHA1
b91d79f43fff2f09fe9c8470836293faa1b89369
-
SHA256
63c9261071b33f16c64892cef79842112c44bc27d71a497dced55e80998bc73d
-
SHA512
bf31b3b975b1e9ca0a7000bbbeb9f3d611f692dcfa889aa801f6804b64cd184cd3a472460a3261c5cffb40604a0736f5fabb2322849724164b1f8695442c3bf1
-
SSDEEP
1536:RdNELMUQdVEd/XnfK4hwWmjyQkZ0/zGrwGsw:eL6VE1XfK4hwWmO0dGsw
Malware Config
Signatures
Files
-
63c9261071b33f16c64892cef79842112c44bc27d71a497dced55e80998bc73d.dll windows x86
a7fa954ec3bc860311c9bf4740060009
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
GetCurrentThread
GetCurrentProcess
SetPriorityClass
ResumeThread
GetPrivateProfileStringA
CreateProcessA
DeleteFileA
GetModuleHandleA
FreeLibrary
FormatMessageA
LocalFree
GetCurrencyFormatA
GetModuleFileNameA
RemoveDirectoryA
GetFileSize
GetTempFileNameA
GetTempPathA
CreateDirectoryA
GetFileAttributesA
MultiByteToWideChar
GetStartupInfoA
MapViewOfFile
CreateFileMappingA
CloseHandle
SetFileTime
DosDateTimeToFileTime
GetLastError
CreateFileA
SetLastError
UnmapViewOfFile
lstrlenA
GetProcAddress
GetPrivateProfileIntA
LoadLibraryA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
user32
TranslateMessage
PeekMessageA
DispatchMessageA
LoadCursorA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
GetLastInputInfo
GetDlgItem
GetWindowRect
MoveWindow
GetDC
ReleaseDC
SendDlgItemMessageA
GetParent
wsprintfA
SetDlgItemTextA
PostMessageA
MessageBoxA
GetFocus
SendMessageA
EndPaint
GetSystemMetrics
BeginPaint
DefWindowProcA
SetCursor
advapi32
RegEnumKeyExA
RegQueryValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
msvcrt
fread
remove
sscanf
ftell
strncpy
malloc
fprintf
strrchr
strcmp
strcpy
strlen
strcat
strncat
memset
memcpy
strchr
qsort
realloc
fgets
strncmp
exit
fseek
fopen
fclose
fflush
freopen
fwrite
sprintf
free
comctl32
PropertySheetA
CreatePropertySheetPageA
gdi32
DeleteObject
SetTextColor
TextOutA
SetBkMode
SelectObject
CreateFontA
CreateDIBitmap
CreateSolidBrush
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ