?GetKeyboardLayoutList@@YGXK_WHPAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
9c825c7231caacec8532d8edad9d49bb56b93ca2bfc43e9b3821bef55d35166b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c825c7231caacec8532d8edad9d49bb56b93ca2bfc43e9b3821bef55d35166b.dll
Resource
win10v2004-20220812-en
General
-
Target
9c825c7231caacec8532d8edad9d49bb56b93ca2bfc43e9b3821bef55d35166b
-
Size
122KB
-
MD5
07868536bc501f10cd456bd40a4630a5
-
SHA1
2a5c8f861b43ca2cf6b2f830bf739eb90f0be940
-
SHA256
9c825c7231caacec8532d8edad9d49bb56b93ca2bfc43e9b3821bef55d35166b
-
SHA512
41c4f662dc72a55a1b2a0c964bb93082eefc564f05a1a04e6b50e4cb9f5f323d7643ec5a3bbf1319a28d7e748bb79e9b62da0583d350417924ba43f95293101c
-
SSDEEP
3072:3VOV33fXYgKqtjQs0wC1gs1nPQtDtV4hWJDZoQHTlhTQKGsB:3MdVQWUPoeWJDZHzlhTosB
Malware Config
Signatures
Files
-
9c825c7231caacec8532d8edad9d49bb56b93ca2bfc43e9b3821bef55d35166b.dll windows x86
61e0d5cacd44bca904339e2a7fff0cd8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetActiveWindow
DrawStateW
PeekMessageA
PostMessageA
CreateIconFromResource
SendDlgItemMessageW
UnionRect
DrawStateA
GetKeyboardLayout
GetWindowLongA
DestroyWindow
CreateDialogParamA
GetClassLongA
TileWindows
mouse_event
InSendMessageEx
GetMessageTime
EnableWindow
ChildWindowFromPointEx
SetDlgItemTextA
IsCharUpperA
SetWindowRgn
GetScrollRange
SetMenuItemInfoW
DispatchMessageW
IsWindowEnabled
DrawTextW
wsprintfA
ShowWindowAsync
MapVirtualKeyExW
LoadAcceleratorsW
GetDlgItem
MoveWindow
kernel32
ExitProcess
SetEndOfFile
Sleep
GetCurrentProcessId
LoadLibraryExA
SetSystemTimeAdjustment
GlobalMemoryStatusEx
GetSystemDefaultLangID
ConnectNamedPipe
ResetEvent
GetCompressedFileSizeW
lstrlenW
CancelIo
UnhandledExceptionFilter
SetFileTime
SearchPathW
LoadLibraryW
GetModuleHandleW
lstrcpyW
AreFileApisANSI
gdi32
SaveDC
SetPixel
Escape
ExtTextOutA
BeginPath
CreateRectRgnIndirect
SetDIBits
SetBitmapBits
GetPaletteEntries
RemoveFontResourceW
OffsetViewportOrgEx
OffsetRgn
Rectangle
SetWindowOrgEx
WidenPath
Exports
Exports
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ