?SetMessageQueueSetMessa
Static task
static1
Behavioral task
behavioral1
Sample
45280cc136af790f8ec67f65c37600323e371e960aa5fa5efb8fcbed14fe5784.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
45280cc136af790f8ec67f65c37600323e371e960aa5fa5efb8fcbed14fe5784.dll
Resource
win10v2004-20221111-en
General
-
Target
45280cc136af790f8ec67f65c37600323e371e960aa5fa5efb8fcbed14fe5784
-
Size
55KB
-
MD5
0ee03918b73380d23b8f2dc44cc8e7e0
-
SHA1
db7a4761e80a91377873af31b6e273f40c101932
-
SHA256
45280cc136af790f8ec67f65c37600323e371e960aa5fa5efb8fcbed14fe5784
-
SHA512
5c31c6d7e5e0fb5e50af1fb64ca3662d301be431eb0c7e33c9d877e12487839aefd1e1db1905133e5593ce446e353d987b111c9ea21526d5325de90e48229724
-
SSDEEP
768:M5SOT1bJLb+lxoTifw/CrAfbkhjiZtdFSoXApVfgYKjsEP9gBQHmmaogurpRm:MSOTJhKlx7fw/lfwsugYKjr9m
Malware Config
Signatures
Files
-
45280cc136af790f8ec67f65c37600323e371e960aa5fa5efb8fcbed14fe5784.dll windows x86
26944e6f5aae421dd28b80ae0274c5c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
HeapWalk
GetCurrentThread
OpenFileMappingW
FormatMessageW
CommConfigDialogW
DeleteFileA
SetCommMask
lstrcpyW
RemoveDirectoryA
GetShortPathNameA
TerminateThread
OpenEventW
UnmapViewOfFile
BuildCommDCBW
CreateNamedPipeA
MulDiv
DeleteFileW
Exports
Exports
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gfdgf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vbvfng Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fghyf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lkjhg Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvcf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xfrdf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ