Static task
static1
Behavioral task
behavioral1
Sample
e81ebc49b264484094740cf4ca4b08c6e161cc049f752ae3c96824351a932930.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
e81ebc49b264484094740cf4ca4b08c6e161cc049f752ae3c96824351a932930.dll
Resource
win10-en-20211208
General
-
Target
e81ebc49b264484094740cf4ca4b08c6e161cc049f752ae3c96824351a932930
-
Size
271KB
-
MD5
bed48005f3b47c5d1d9114c735ece89a
-
SHA1
b8a3c880fcf97c2f9b3023cc1d104744774705db
-
SHA256
e81ebc49b264484094740cf4ca4b08c6e161cc049f752ae3c96824351a932930
-
SHA512
13c6b445d568bf0dc864f8a2b492b59038a766c139a728d8bcb9e02810720967e68b913607941bf06361b6dee96a33dfc7dccf19eb0638eb98cd0c1b3e5d6028
-
SSDEEP
1536:auuimGosEqZocmBh1ljiZKlBXTTEHs2nlWUU5B+opdTml/DRgkfY38BkfJMHZQ0:adimGoFqCl1lhBUBp1jZh1eZqKH
Malware Config
Signatures
Files
-
e81ebc49b264484094740cf4ca4b08c6e161cc049f752ae3c96824351a932930.dll windows x86
39dcb89b250c1ea28e1fa246f9cdfe52
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect
GetCurrentThread
user32
ReleaseDC
GetCursorPos
GetWindowDC
GetCapture
GetCursorInfo
GetCaretBlinkTime
winspool.drv
StartDocPrinterA
ConvertAnsiDevModeToUnicodeDevmode
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE