_IWMPEvents@0
Static task
static1
Behavioral task
behavioral1
Sample
b72e70c604bf19e9c9ad400902081bc9af1cef727067f2361b15197fa8644155.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b72e70c604bf19e9c9ad400902081bc9af1cef727067f2361b15197fa8644155.dll
Resource
win10v2004-20220812-en
General
-
Target
b72e70c604bf19e9c9ad400902081bc9af1cef727067f2361b15197fa8644155
-
Size
29KB
-
MD5
b758dd15950c278dfa64ff62349b63b8
-
SHA1
3aa49174802b8237dec479134d3dae362107c0a2
-
SHA256
b72e70c604bf19e9c9ad400902081bc9af1cef727067f2361b15197fa8644155
-
SHA512
2ebb598f28f6eb190eac1bdc45bd7dab67b4dc3072a0c761df83122489642ffcf83c1447ccb43c4872e1421f3ae0035c9cf205d583748e83fc24c2d3fdd7d176
-
SSDEEP
768:GlEAMSTbMaxraDL1OGabtnel/dZ+iNoauH/mNfG:GlErScGraDL1f8Bel/dZzufmNfG
Malware Config
Signatures
Files
-
b72e70c604bf19e9c9ad400902081bc9af1cef727067f2361b15197fa8644155.dll windows x86
fc221a8f9ea02450aaec51180cb680fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetTimeZoneInformation
GetCommandLineW
GetProcAddress
SetUnhandledExceptionFilter
SetConsoleCP
GlobalAlloc
InterlockedExchange
SetStdHandle
VirtualProtect
GetStartupInfoA
MultiByteToWideChar
HeapAlloc
ExitProcess
UnhandledExceptionFilter
TerminateProcess
GetVersion
EnterCriticalSection
ExpandEnvironmentStringsW
LoadLibraryA
GetACP
GetLastError
GetUserDefaultLCID
CompareStringW
GetFullPathNameW
FlushInstructionCache
SetFilePointer
FormatMessageW
WriteFile
GetSystemInfo
GetSystemTimeAsFileTime
CreateMutexA
GetProcessHeap
GetThreadLocale
LCMapStringA
GetCommandLineA
RemoveDirectoryW
HeapReAlloc
GetModuleHandleA
GetOEMCP
SetConsoleCtrlHandler
advapi32
RegOpenKeyExW
user32
CallNextHookEx
GetMessageA
DestroyMenu
FindWindowW
EndDialog
PostMessageW
OffsetRect
MsgWaitForMultipleObjects
GetDC
GetWindowDC
LoadStringW
MoveWindow
ole32
CoTreatAsClass
CoTaskMemAlloc
msvcrt
_controlfp
_initterm
_errno
_cexit
wcschr
lz32
LZDone
gdi32
DeleteObject
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ