fxUserplugin
Static task
static1
Behavioral task
behavioral1
Sample
816e1e2d9dbd7b0c1905ef19d2aa7c84098aa158d5c6a856e4758116929160ee.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
816e1e2d9dbd7b0c1905ef19d2aa7c84098aa158d5c6a856e4758116929160ee.dll
Resource
win10v2004-20220901-en
General
-
Target
816e1e2d9dbd7b0c1905ef19d2aa7c84098aa158d5c6a856e4758116929160ee
-
Size
140KB
-
MD5
d8f00d729eb4b4db9f6666b6898a0a20
-
SHA1
8f751235597d38e2d7c0c086255515f3fa19ec64
-
SHA256
816e1e2d9dbd7b0c1905ef19d2aa7c84098aa158d5c6a856e4758116929160ee
-
SHA512
962252c7e990e2d4628d759a732a6c00d48eab7a5b92dc82f93ab5a1a2660ccfd12d2da35224f7c641ebc4f20c99e8b881e7c954296d4afe6bb2356e39a26722
-
SSDEEP
3072:FT+M5YlGgTtcc2ba1KNg8eq/oiUm8+BvJjwBD+Fd:EgYoghccCaMloirBeBD+Fd
Malware Config
Signatures
Files
-
816e1e2d9dbd7b0c1905ef19d2aa7c84098aa158d5c6a856e4758116929160ee.dll windows x86
95ed4d07494596d252d8099087fb6f58
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
MapViewOfFile
CloseHandle
ExitProcess
SetLastError
UnmapViewOfFile
EnterCriticalSection
CreateProcessA
LocalFree
InterlockedCompareExchange
ReleaseMutex
OpenEventA
lstrlenA
WaitForSingleObject
GetModuleFileNameA
Sleep
CopyFileA
InterlockedDecrement
LoadLibraryA
GetCommandLineA
CreateEventA
GetTickCount
GetProcAddress
LeaveCriticalSection
CreateDirectoryA
InterlockedIncrement
GetModuleHandleA
lstrlenW
ole32
CoUninitialize
CoCreateGuid
OleCreate
OleSetContainedObject
CoInitialize
CreateBindCtx
user32
GetParent
SendMessageA
DispatchMessageA
DefWindowProcA
TranslateMessage
CreateWindowExA
GetWindowLongA
SetTimer
PostMessageA
GetMessageA
KillTimer
SetWindowLongA
FindWindowA
GetClassNameA
PostQuitMessage
RegisterWindowMessageA
DestroyWindow
GetSystemMetrics
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
shlwapi
StrStrIW
UrlUnescapeW
advapi32
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
Exports
Exports
Sections
.text Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ