Static task
static1
Behavioral task
behavioral1
Sample
4452aec1b8add5c93197a7d01334be8f7da881c54aa36a977de422c3e4d50463.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4452aec1b8add5c93197a7d01334be8f7da881c54aa36a977de422c3e4d50463.dll
Resource
win10v2004-20220812-en
General
-
Target
4452aec1b8add5c93197a7d01334be8f7da881c54aa36a977de422c3e4d50463
-
Size
149KB
-
MD5
78f1ec8f439a9de32c1d1e227feae1a0
-
SHA1
309b76557c69a791f694e9f1af5c708c2cac4b8b
-
SHA256
4452aec1b8add5c93197a7d01334be8f7da881c54aa36a977de422c3e4d50463
-
SHA512
39483e55611c57f0df2cfd0f51bf32fd0b920c97c0acccad36b704738f575c27b6d6cb55df6496313c7347cb1224c6266fb77cd0933564bed6f7dd65c228acb0
-
SSDEEP
3072:3ZdlSOfbcKLhfdQmfeJR3NAeG+WyINx7ICwgf6:30OD1fdneJRqyIzICw
Malware Config
Signatures
Files
-
4452aec1b8add5c93197a7d01334be8f7da881c54aa36a977de422c3e4d50463.dll windows x86
16e17188869ddb30775e546de78312f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetStdHandle
lstrcpyW
GetSystemDirectoryW
CopyFileW
TlsSetValue
LockResource
LeaveCriticalSection
GetTimeZoneInformation
GetOEMCP
FindNextFileW
SystemTimeToTzSpecificLocalTime
CreateThread
GetCurrentThread
WaitForMultipleObjects
InitializeCriticalSection
GetFileType
lstrcmpiW
GetConsoleOutputCP
SetEnvironmentVariableA
SetFilePointer
FindNextChangeNotification
ExpandEnvironmentStringsA
VirtualQuery
DeleteCriticalSection
SetEvent
GetModuleHandleA
LoadLibraryW
FindClose
CloseHandle
QueryPerformanceCounter
GetTempFileNameW
OutputDebugStringW
IsValidLocale
GetProcessHeap
GetFileAttributesExW
InterlockedDecrement
FindResourceW
WritePrivateProfileStringW
CreateFileA
GetVersion
GetStringTypeW
HeapReAlloc
GetStringTypeA
LoadLibraryA
DeleteFileW
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetConsoleMode
GlobalUnlock
UnhandledExceptionFilter
GetComputerNameW
CompareStringW
FlushFileBuffers
lstrcpynW
WideCharToMultiByte
LCMapStringW
FreeLibrary
HeapAlloc
DebugBreak
ExitProcess
FileTimeToSystemTime
OpenEventW
IsProcessorFeaturePresent
ExpandEnvironmentStringsW
LocalFree
GetACP
FatalAppExitA
CreateEventW
RaiseException
TerminateProcess
GetEnvironmentStringsW
GetStartupInfoA
GlobalAlloc
SetUnhandledExceptionFilter
HeapFree
RemoveDirectoryW
WriteConsoleA
GetModuleFileNameA
FindFirstFileW
lstrcatW
LCMapStringA
WinExec
GetUserDefaultLCID
GetDateFormatW
SetHandleCount
VirtualAlloc
WaitForSingleObject
EnumSystemLocalesA
CreateFileW
TlsAlloc
GetTimeFormatA
GetProcAddress
GetFileSize
WriteConsoleW
CreateDirectoryW
InterlockedIncrement
InterlockedCompareExchange
FindFirstChangeNotificationW
FreeEnvironmentStringsW
GetVersionExW
GetCurrentProcess
GetModuleHandleW
HeapSize
GetFileAttributesW
FindCloseChangeNotification
GlobalSize
VirtualFree
GetModuleFileNameW
GetLocaleInfoW
IsDebuggerPresent
GetDateFormatA
HeapDestroy
LocalAlloc
ReadFile
GetConsoleCP
GetLocaleInfoA
WriteFile
lstrcpynA
LoadLibraryExW
GetSystemDefaultLangID
GetCPInfo
TlsGetValue
FlushInstructionCache
lstrlenA
GetLastError
InterlockedExchange
ResetEvent
GetCurrentThreadId
lstrlenW
HeapCreate
GetWindowsDirectoryW
VerLanguageNameW
GetTempPathW
GetTickCount
GetStartupInfoW
WritePrivateProfileSectionW
SizeofResource
MoveFileW
GetCurrentProcessId
CompareStringA
TlsFree
SetStdHandle
GetPrivateProfileStringW
LoadResource
GetCommandLineW
RtlUnwind
EnterCriticalSection
IsValidCodePage
GlobalLock
GetPrivateProfileIntW
MultiByteToWideChar
lstrcmpW
Sleep
SetConsoleCtrlHandler
MulDiv
SetLastError
user32
GetMessagePos
DrawIconEx
ShowCaret
CreatePopupMenu
GetCapture
BeginPaint
AppendMenuW
GetSysColorBrush
DestroyWindow
EndDialog
SetMenuItemInfoW
EndDeferWindowPos
BeginDeferWindowPos
DrawFocusRect
GetFocus
OffsetRect
GetClipboardData
SetCapture
MoveWindow
CreateCaret
GetWindowDC
TranslateMDISysAccel
GetDlgItemInt
GetWindowPlacement
GetClassNameW
IsWindowVisible
RegisterClassW
RegisterWindowMessageW
CreateWindowExW
MapWindowPoints
UnregisterClassA
CharNextW
SetScrollPos
SetWindowLongW
MessageBeep
SubtractRect
wvsprintfW
ShowScrollBar
SetTimer
InflateRect
IsMenu
ScrollWindowEx
UnregisterClassW
GetSystemMetrics
GetActiveWindow
GetWindowThreadProcessId
LoadIconW
IsChild
DrawEdge
FindWindowW
EndPaint
FrameRect
RegisterClassExW
MonitorFromWindow
SetFocus
GetClassInfoExW
SetDlgItemInt
SetCaretPos
DefFrameProcW
PostQuitMessage
TranslateMessage
DefMDIChildProcW
GetMenu
LoadCursorW
GetScrollInfo
GetMenuStringW
GetMessageW
ScreenToClient
MessageBoxW
DestroyMenu
ReleaseDC
AdjustWindowRectEx
GetWindowTextLengthW
TrackPopupMenuEx
PeekMessageW
SetWindowsHookExW
WindowFromPoint
DialogBoxParamW
PtInRect
EqualRect
GetWindowRect
EnableWindow
CloseClipboard
GetDoubleClickTime
LoadAcceleratorsW
LoadStringA
GetWindowLongW
DestroyCaret
SetForegroundWindow
ModifyMenuW
SetClipboardData
GetMenuDefaultItem
DispatchMessageW
SetScrollInfo
SetRectEmpty
GetMonitorInfoW
RegisterClipboardFormatW
InsertMenuW
GetClassLongW
DrawFrameControl
GetMenuItemID
GetMenuItemCount
ClientToScreen
GetDlgItem
CallWindowProcW
EnableMenuItem
GetClassInfoW
ReleaseCapture
SetMenuDefaultItem
IsWindow
OpenClipboard
PostMessageW
SetCursor
DragDetect
LockWindowUpdate
CharLowerW
IsWindowEnabled
KillTimer
GetMenuItemInfoW
SetMenu
BringWindowToTop
UnhookWindowsHookEx
SystemParametersInfoW
DeferWindowPos
GetDlgItemTextW
FillRect
CopyRect
SetWindowPlacement
SetWindowTextW
IsClipboardFormatAvailable
GetParent
SendMessageW
RedrawWindow
GetWindowTextW
LoadStringW
TrackPopupMenu
GetSystemMenu
GetDlgCtrlID
DefWindowProcW
InvalidateRect
LoadMenuW
ShowWindow
GetKeyState
CallNextHookEx
SetParent
GetDC
LoadImageW
LoadBitmapW
GetClientRect
GetCursorPos
UpdateWindow
SetDlgItemTextW
GetSubMenu
GetWindow
SetWindowPos
IntersectRect
TranslateAcceleratorW
EmptyClipboard
GetDesktopWindow
DrawTextW
RemoveMenu
DrawMenuBar
gdi32
SelectPalette
CreateFontW
SelectClipRgn
GetClipBox
SaveDC
CreatePatternBrush
CreateSolidBrush
PatBlt
CreateDIBSection
MoveToEx
BitBlt
Rectangle
RestoreDC
RealizePalette
CreateCompatibleDC
DPtoLP
LPtoDP
CreatePen
SetBkColor
CreateRectRgn
CreatePalette
GetTextExtentPointW
GetClipRgn
GetTextMetricsW
GetTextExtentPoint32W
LineTo
GetViewportOrgEx
DeleteObject
Polygon
DeleteDC
SetPolyFillMode
ExtTextOutW
GetObjectW
SetWindowOrgEx
GetStockObject
SelectObject
CreateCompatibleBitmap
SetTextColor
CreateBitmap
SetBrushOrgEx
SetViewportOrgEx
IntersectClipRect
CreateFontIndirectW
Polyline
GetDeviceCaps
TextOutW
SetBkMode
comdlg32
GetSaveFileNameW
ChooseFontW
GetOpenFileNameW
ChooseColorW
advapi32
RegReplaceKeyW
GetSecurityDescriptorSacl
RegLoadKeyW
GetUserNameW
RegQueryInfoKeyW
RegEnumKeyExW
GetTokenInformation
RegSetKeySecurity
RegEnumValueA
LookupPrivilegeValueW
SetNamedSecurityInfoW
CopySid
GetNamedSecurityInfoW
SetSecurityDescriptorDacl
GetSidSubAuthorityCount
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
RegGetKeySecurity
RegDeleteValueW
RegSaveKeyW
GetSecurityDescriptorControl
GetSidSubAuthority
AdjustTokenPrivileges
RegRestoreKeyW
GetSecurityDescriptorGroup
RegDeleteKeyW
MapGenericMask
RegSetValueExW
RegCreateKeyExW
GetSidIdentifierAuthority
GetSecurityDescriptorDacl
RegEnumValueW
IsTextUnicode
RegUnLoadKeyW
RegConnectRegistryW
GetSecurityDescriptorOwner
RegQueryValueExA
GetLengthSid
RegQueryValueExW
OpenProcessToken
InitializeSecurityDescriptor
InitializeAcl
ole32
CoUninitialize
CoTaskMemFree
DoDragDrop
CoCreateInstance
CoTaskMemRealloc
ReleaseStgMedium
OleInitialize
OleDuplicateData
RegisterDragDrop
CoTaskMemAlloc
RevokeDragDrop
oleaut32
VarUI4FromStr
VarDecFromStr
SysFreeString
VarI4FromStr
VarDecCmp
SystemTimeToVariantTime
VarR8FromStr
comctl32
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Create
ord8
ImageList_LoadImageW
_TrackMouseEvent
ImageList_Remove
DestroyPropertySheetPage
CreateStatusWindowW
ImageList_Draw
ImageList_ReplaceIcon
PropertySheetW
ImageList_DrawIndirect
CreatePropertySheetPageW
ImageList_AddMasked
ImageList_Destroy
InitCommonControlsEx
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
msacm32
acmDriverAddA
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ