CaptureScreen
Static task
static1
Behavioral task
behavioral1
Sample
6ad6df98875107408029cdae2d60099bbf5fa6422af9f4bb4c539ca2417d87a0.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6ad6df98875107408029cdae2d60099bbf5fa6422af9f4bb4c539ca2417d87a0.dll
Resource
win10v2004-20220901-en
General
-
Target
6ad6df98875107408029cdae2d60099bbf5fa6422af9f4bb4c539ca2417d87a0
-
Size
420KB
-
MD5
97667d712447bbebbcbcf091a1f1a6c0
-
SHA1
14a3c29cc2241c995a160811264bc8d80d6d607f
-
SHA256
6ad6df98875107408029cdae2d60099bbf5fa6422af9f4bb4c539ca2417d87a0
-
SHA512
a619244de290e96eed5505d92f0bdb5e336313d9fd730c727caa61e16ec908527895b2982eccb2f0e8023d309b50997aecde8ab66ce64832859f0e89a0af3683
-
SSDEEP
6144:hNZo3PYM6FXm7yH+bN2S6S072p5NvJuU0bQPNfs:JzFXm7egNb6S0SX7d1E
Malware Config
Signatures
Files
-
6ad6df98875107408029cdae2d60099bbf5fa6422af9f4bb4c539ca2417d87a0.dll windows x86
46b98cbfbd6374ae0ea06aee363f780e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
InterlockedIncrement
InterlockedDecrement
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetLastError
TlsGetValue
SetLastError
MulDiv
lstrcpyA
FlushFileBuffers
SetFilePointer
WriteFile
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
CreateFileA
CloseHandle
HeapAlloc
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
user32
GetDC
CreateWindowExA
GetWindowRect
DestroyWindow
KillTimer
RegisterClassA
LoadCursorA
UnregisterClassA
LoadBitmapA
SetTimer
FillRect
GetClientRect
IsWindowVisible
DrawTextA
GetWindowDC
WinHelpA
PtInRect
SetWindowRgn
InvalidateRect
CallWindowProcA
PostQuitMessage
GetSystemMetrics
IsIconic
ReleaseDC
MoveWindow
LoadStringA
LoadMenuA
GetCursorPos
GetSubMenu
TrackPopupMenu
DestroyMenu
SendMessageA
LoadImageA
GetAncestor
GetWindowTextA
FindWindowA
ShowWindow
IsWindow
EnableWindow
ShowOwnedPopups
SystemParametersInfoA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DefWindowProcA
BeginPaint
GetWindowLongA
EndPaint
SetWindowLongA
PostMessageA
gdi32
GetDeviceCaps
CreateFontIndirectA
GetTextMetricsA
SetBkMode
SetTextColor
CreateRoundRectRgn
CreateCompatibleBitmap
GetPixel
CreateRectRgn
CombineRgn
SetStretchBltMode
GetObjectA
StretchBlt
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateSolidBrush
shell32
Shell_NotifyIconA
bvrpctln
MakeFullPathName
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Exports
Exports
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE