_pSxUQ2b
Static task
static1
Behavioral task
behavioral1
Sample
ba89f7e66d9ddb5b7d2078d774c0d850d0619045ab3f4cf53a82c3c9bf53db68.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba89f7e66d9ddb5b7d2078d774c0d850d0619045ab3f4cf53a82c3c9bf53db68.dll
Resource
win10v2004-20220812-en
General
-
Target
ba89f7e66d9ddb5b7d2078d774c0d850d0619045ab3f4cf53a82c3c9bf53db68
-
Size
1.0MB
-
MD5
e5f20bb14ad9d6b2927fb6b7b3e6d5ee
-
SHA1
a61e1c2c803cd372030a3c12515e4ad78a93aaef
-
SHA256
ba89f7e66d9ddb5b7d2078d774c0d850d0619045ab3f4cf53a82c3c9bf53db68
-
SHA512
ccc4c0c5540afc1274f82e0cacdceb0aa7d4a71c5527a688dc3a4354cd4250fcbbac9c3e910840249fc8e0d48506b732fa796fabe75c01a87bf95c2665ed6514
-
SSDEEP
3072:lzhe/hwL7T/IJGYSojYZ8wuJHMCUq6KjjcPAQspO55NrEw+RUMF1sQKpRfqF:lY/hwLH/JEE8RnUq6PgO5n4wZMFOpR
Malware Config
Signatures
Files
-
ba89f7e66d9ddb5b7d2078d774c0d850d0619045ab3f4cf53a82c3c9bf53db68.dll windows x86
afb49ef785c3fe18a208ee0b7cc85152
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
OleLoadPicture
user32
CloseClipboard
ChildWindowFromPoint
CharUpperBuffA
IsChild
CheckMenuItem
IsMenu
LoadCursorA
GetMenu
ClientToScreen
kernel32
VirtualAllocEx
GetProcAddress
lstrlenA
GetModuleHandleA
LocalAlloc
LoadLibraryA
GetOEMCP
ExitProcess
comctl32
ImageList_GetBkColor
ImageList_Draw
ImageList_Write
ImageList_DrawEx
ImageList_Add
ImageList_DragShowNolock
ImageList_Create
ImageList_Destroy
ImageList_Read
ImageList_Remove
Exports
Exports
Sections
CODE Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 788KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fpdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eddata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ