Static task
static1
Behavioral task
behavioral1
Sample
e993bff21452ae22323bd2dffbbf4dd30ad4614af174e63b244cce89c191b6ab.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e993bff21452ae22323bd2dffbbf4dd30ad4614af174e63b244cce89c191b6ab.dll
Resource
win10v2004-20221111-en
General
-
Target
e993bff21452ae22323bd2dffbbf4dd30ad4614af174e63b244cce89c191b6ab
-
Size
366KB
-
MD5
0443da8b086717f33d6b64ea82a1e689
-
SHA1
d872cddf867a7d7a30d99bd8220197ef5993e990
-
SHA256
e993bff21452ae22323bd2dffbbf4dd30ad4614af174e63b244cce89c191b6ab
-
SHA512
3dcb61e406bbfe8a836f3a863688458ed5ce985db68c6b0f4e8f94b1970487c993555e31a7b06bbe2c52ecd08b83b6fff706ea6a53094fc26a4ec5b0861b69b3
-
SSDEEP
6144:dFUwDFfgNCiYeL7zTaVCo4kXoPjYWfR5LIHMBTESV:rdgNCiYeXzTuXyLR5ymT7
Malware Config
Signatures
Files
-
e993bff21452ae22323bd2dffbbf4dd30ad4614af174e63b244cce89c191b6ab.dll windows x86
e085d573e4cc192360678870e49821af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetWindowTextA
DrawTextW
AlignRects
IsWindow
LoadMenuA
CopyRect
GetWindow
AppendMenuA
AppendMenuW
CloseWindow
LoadCursorA
InsertMenuA
CopyImage
CopyIcon
DrawIconEx
BlockInput
CreateIcon
CopyRect
LoadCursorA
DialogBoxParamA
LoadMenuA
CreateIcon
BlockInput
DrawTextA
InsertMenuA
GetMenu
DrawIconEx
IsWindow
IsWindow
GetWindowTextA
CalcMenuBar
GetWindowTextLengthA
AppendMenuW
GetDlgItem
DrawTextW
DrawIcon
CopyRect
CloseWindow
GetCursor
DrawIconEx
CopyIcon
LoadCursorA
DialogBoxParamA
AppendMenuA
LoadMenuA
InsertMenuA
AppendMenuW
DrawIcon
GetWindow
IsMenu
LoadMenuA
GetDlgItem
IsWindow
AppendMenuA
LoadCursorA
DrawTextA
CloseWindow
GetWindowTextLengthA
comctl32
ImageList_AddMasked
ImageList_GetIconSize
ImageList_LoadImage
ImageList_Write
ImageList_DragLeave
ImageList_Merge
ImageList_Copy
ImageList_DragEnter
ImageList_Remove
ImageList_DrawIndirect
ImageList_AddIcon
advapi32
RegOpenKeyA
RegOpenKeyW
RegLoadKeyA
RegGetKeySecurity
RegDeleteValueW
RegCreateKeyW
RegReplaceKeyA
RegCreateKeyExA
RegCreateKeyExW
RegQueryValueExW
RegReplaceKeyW
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegEnumValueW
RegLoadKeyA
RegLoadKeyW
RegReplaceKeyA
RegEnumValueW
RegEnumValueA
RegEnumKeyExW
RegQueryValueW
RegCreateKeyW
RegEnumKeyW
RegDeleteValueW
Sections
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.b8882 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 826B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ