Static task
static1
Behavioral task
behavioral1
Sample
694aacad35d2f92cf0a6960436923d51017f5fe3c4652e6092bfe555f8b67d61.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
694aacad35d2f92cf0a6960436923d51017f5fe3c4652e6092bfe555f8b67d61.dll
Resource
win10v2004-20221111-en
General
-
Target
694aacad35d2f92cf0a6960436923d51017f5fe3c4652e6092bfe555f8b67d61
-
Size
92KB
-
MD5
d97872ffb866491f030f4064c4e0b160
-
SHA1
71c9d3bc6ae97da6691391cd8e487a48332de945
-
SHA256
694aacad35d2f92cf0a6960436923d51017f5fe3c4652e6092bfe555f8b67d61
-
SHA512
ddc6ada54786e47743ffdee5f496a9c0410b3cb30262e9c1495de0c96d4c8022240195e4ba615870b5d0d9b3d78ed1b190ec0be45e253bc3aaea71c98e2d91ac
-
SSDEEP
1536:LAbmzNr1/6t7gvGGg20QT6tV0+8kvoD5eGdgPPm0uEkv9nu9ByZT91yaBLdv:sOH/K7gvGt5sDoGdKPmrhu9ghRBx
Malware Config
Signatures
Files
-
694aacad35d2f92cf0a6960436923d51017f5fe3c4652e6092bfe555f8b67d61.dll windows x86
f0994ffd7ede082180d52d46afaae808
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseFontA
ChooseFontW
FindTextW
GetOpenFileNameA
GetSaveFileNameW
PrintDlgExW
PrintDlgW
ChooseColorA
user32
CheckRadioButton
CreatePopupMenu
DestroyWindow
SetWindowPos
GetClientRect
GetMenuItemID
GetWindowTextA
InflateRect
LoadCursorA
MessageBoxA
RegisterClassA
ReleaseCapture
SetClipboardData
SetScrollInfo
msi
MsiVerifyPackageW
MsiGetFeatureValidStatesW
MsiGetTargetPathA
MsiPreviewDialogW
MsiEnumProductsW
MsiDeleteUserDataA
kernel32
EscapeCommFunction
CloseHandle
CopyFileW
CreateJobObjectA
WriteProfileStringA
WinExec
SetThreadLocale
SetFileApisToANSI
SetEvent
SetCurrentDirectoryW
OpenJobObjectA
HeapCreate
HeapAlloc
GetVersionExA
GetStartupInfoA
GetOEMCP
GetModuleHandleA
GetCommandLineA
GetBinaryTypeA
GetACP
ExitProcess
DefineDosDeviceA
CallNamedPipeA
ole32
CoTaskMemFree
CoGetMalloc
CoCreateInstance
CoCreateGuid
CoBuildVersion
StringFromGUID2
dbghelp
SymSetSearchPath
DbgHelpCreateUserDumpW
SymFromName
SymMatchString
DbgHelpCreateUserDump
comctl32
ImageList_Draw
ImageList_GetImageRect
ImageList_DragShowNolock
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ