Static task
static1
Behavioral task
behavioral1
Sample
f89502eb8b0fd000bf023921f99b9e135d2dc3ee5f1f6d289d2aad07378afec8.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f89502eb8b0fd000bf023921f99b9e135d2dc3ee5f1f6d289d2aad07378afec8.dll
Resource
win10v2004-20220901-en
General
-
Target
f89502eb8b0fd000bf023921f99b9e135d2dc3ee5f1f6d289d2aad07378afec8
-
Size
114KB
-
MD5
f21d1ee986d173889d18a07e80accdf0
-
SHA1
e66dd8e0f9cd84d464a1cf5c6ffa07f75879f41c
-
SHA256
f89502eb8b0fd000bf023921f99b9e135d2dc3ee5f1f6d289d2aad07378afec8
-
SHA512
aa6b1aacf86971ad712cc4a14d17714ee02fc5e83e0f7583ad069b502a3b5581e2819591aad8a18ebe5b72553ddcbf02268526beb291d87442fcd8a2967e59ed
-
SSDEEP
1536:lhAiezhRne5sMqHd5M6RO24ppa6TOcSeT8+LlsUN41:lhArzHnzo+96TOCTfu
Malware Config
Signatures
Files
-
f89502eb8b0fd000bf023921f99b9e135d2dc3ee5f1f6d289d2aad07378afec8.dll windows x86
a2c64c3e85b64f34eaa145e46e7d616b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetTempPathW
GetCurrentThread
GetTempPathA
SetConsoleCP
AddAtomA
DefineDosDeviceA
GetComputerNameW
GetFileInformationByHandle
FindFirstFileW
GlobalDeleteAtom
SetConsoleNumberOfCommandsA
GetShortPathNameA
VerLanguageNameW
VirtualFree
GetDriveTypeW
CloseConsoleHandle
DeleteFiber
GlobalGetAtomNameW
BeginUpdateResourceW
SearchPathW
VirtualFreeEx
GetModuleHandleA
GetCurrentDirectoryA
ReadConsoleA
PostQueuedCompletionStatus
CallNamedPipeA
ReadConsoleInputW
EnumResourceTypesA
SetCurrentDirectoryA
SetUnhandledExceptionFilter
SetVolumeLabelW
IsDBCSLeadByte
WriteConsoleOutputCharacterA
PeekConsoleInputW
VirtualAlloc
user32
DrawFocusRect
SwitchToThisWindow
CharNextExA
MessageBoxIndirectW
GetMenuStringA
TranslateMessageEx
MessageBoxA
WindowFromDC
SetWindowContextHelpId
LoadIconA
UnregisterClassW
MsgWaitForMultipleObjects
SetInternalWindowPos
DdeAddData
GetClassWord
DrawTextExW
VkKeyScanExA
GetMessageTime
IsCharUpperA
OpenDesktopA
GetWindowRect
DdeDisconnectList
SetProcessWindowStation
DrawMenuBar
RedrawWindow
GetInternalWindowPos
EnumDesktopsW
WindowFromPoint
DlgDirListComboBoxA
HideCaret
DestroyCursor
SetWindowsHookExW
BeginPaint
GetActiveWindow
gdi32
CreateScalableFontResourceW
GdiComment
CombineRgn
UnrealizeObject
CreateBitmapIndirect
GdiSetPixelFormat
GdiEntry5
GetNearestPaletteIndex
CombineTransform
GetGlyphOutline
CreateColorSpaceW
SelectObject
GetPaletteEntries
TextOutW
GdiGetCharDimensions
ColorMatchToTarget
EnumEnhMetaFile
IntersectClipRect
SetBitmapBits
GetBitmapDimensionEx
GetCharABCWidthsFloatW
SetSystemPaletteUse
GetClipBox
GdiDllInitialize
CancelDC
CreateICA
StartDocW
CreateBitmap
SetArcDirection
GetEnhMetaFileDescriptionW
ole32
StgGetIFillLockBytesOnILockBytes
MonikerRelativePathTo
StgIsStorageILockBytes
StgGetIFillLockBytesOnFile
OleNoteObjectVisible
CoBuildVersion
IIDFromString
CLSIDFromString
HMENU_UserUnmarshal
OleTranslateAccelerator
OpenOrCreateStream
HPALETTE_UserUnmarshal
CoReleaseServerProcess
STGMEDIUM_UserFree
HENHMETAFILE_UserMarshal
CoGetClassObject
WriteClassStm
CreateFileMoniker
OleMetafilePictFromIconAndLabel
HACCEL_UserMarshal
CoGetInstanceFromIStorage
GetHGlobalFromStream
CreateErrorInfo
OleConvertOLESTREAMToIStorage
OleGetClipboard
EnableHookObject
HGLOBAL_UserMarshal
CoTaskMemRealloc
Sections
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 39KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 49KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ