_GetMessageHookProc@12
Static task
static1
Behavioral task
behavioral1
Sample
bfa8c203624decef650e62c3a393cb86c916ccc4c58af7be204cf6165e902381.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfa8c203624decef650e62c3a393cb86c916ccc4c58af7be204cf6165e902381.dll
Resource
win10v2004-20220901-en
General
-
Target
bfa8c203624decef650e62c3a393cb86c916ccc4c58af7be204cf6165e902381
-
Size
8KB
-
MD5
630dee691f64c911b71c35c8b7e6251d
-
SHA1
6183abfd605081ef598354b105d5b96c3713ec2f
-
SHA256
bfa8c203624decef650e62c3a393cb86c916ccc4c58af7be204cf6165e902381
-
SHA512
113cc220daa6c7d855ca07912820554251e1c7743c2c1d11af7043a5f2f7b453dff3cc54ff229a83bffdd6c953abc5f11db0e631350df4580c8a2d7ad76cd879
-
SSDEEP
96:mIDOYje41IwIiB9FcGwU15dIxkOkFgZPGS/UBi4yr3qHtMQHNNARfqzElMC:NDOYjevcxNAk3FgZ9/U1nHN+Lp
Malware Config
Signatures
Files
-
bfa8c203624decef650e62c3a393cb86c916ccc4c58af7be204cf6165e902381.dll windows x86
9e39b8e8dc5937026746657432a40ecf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
msvcrt
_adjust_fdiv
_strlwr
_beginthreadex
time
fopen
fgets
fclose
remove
malloc
strstr
rand
sprintf
free
srand
_initterm
kernel32
LoadResource
FindResourceA
GetUserDefaultLCID
LockResource
GetLastError
GetLocalTime
lstrcatA
CreateFileA
WriteFile
CloseHandle
lstrcpyA
WinExec
ExpandEnvironmentStringsA
Sleep
GetModuleFileNameA
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 402B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ