Tensame
Static task
static1
Behavioral task
behavioral1
Sample
893f1615c8e7470900225101a56bd29e4e5b8047f1fc707d51a13dfe9629b32e.dll
Resource
win7-20220311-en
General
-
Target
893f1615c8e7470900225101a56bd29e4e5b8047f1fc707d51a13dfe9629b32e
-
Size
180KB
-
MD5
f4cd44721385fe004497dbb42fb2a237
-
SHA1
66e7c0815f3ca18814040e932f35673963e94353
-
SHA256
893f1615c8e7470900225101a56bd29e4e5b8047f1fc707d51a13dfe9629b32e
-
SHA512
2fe1b2c27e3bcf4a65c8cbf345b65c7edc2821fa19f8012c1a4dad02986f27028193847926f09d916735505eb25becac60d1037fa154134a519b1a2bdf93f2fb
Malware Config
Signatures
Files
-
893f1615c8e7470900225101a56bd29e4e5b8047f1fc707d51a13dfe9629b32e.dll windows x86
add2c75cfeba434787ed0eb291c0847b
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetProcessHeap
Sleep
CreateEventA
CreateSemaphoreA
SetSystemPowerState
GetLocalTime
VirtualProtect
GetVersion
GetTempPathA
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
LCMapStringW
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
GetModuleFileNameW
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetStdHandle
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapFree
HeapAlloc
SetLastError
CreateFileW
pdh
PdhOpenQueryH
PdhEnumMachinesHA
PdhGetLogFileSize
PdhGetCounterInfoA
PdhGetDllVersion
PdhEnumMachinesA
PdhGetDefaultPerfObjectHA
PdhSetCounterScaleFactor
PdhConnectMachineA
PdhCreateSQLTablesA
PdhComputeCounterStatistics
PdhCollectQueryDataEx
PdhBrowseCountersHA
PdhGetFormattedCounterArrayA
PdhEnumObjectsA
PdhEnumObjectItemsA
PdhGetDefaultPerfObjectA
PdhAddCounterA
PdhGetRawCounterArrayA
PdhReadRawLogRecord
PdhEnumObjectItemsHA
PdhGetCounterTimeBase
PdhVerifySQLDBA
PdhOpenQueryA
PdhUpdateLogFileCatalog
PdhGetDataSourceTimeRangeA
PdhOpenLogA
PdhGetDefaultPerfCounterA
PdhBrowseCountersA
PdhEnumObjectsHA
PdhCloseQuery
PdhGetDataSourceTimeRangeH
PdhSetDefaultRealTimeDataSource
PdhParseCounterPathA
PdhUpdateLogA
PdhMakeCounterPathA
PdhExpandWildCardPathA
PdhEnumLogSetNamesA
PdhSetLogSetRunID
PdhBindInputDataSourceA
PdhParseInstanceNameA
PdhGetFormattedCounterValue
PdhSelectDataSourceA
PdhExpandCounterPathA
PdhSetQueryTimeRange
PdhRemoveCounter
PdhExpandWildCardPathHA
PdhGetDefaultPerfCounterHA
PdhCalculateCounterFromRawValue
PdhValidatePathA
PdhCloseLog
PdhGetLogSetGUID
PdhFormatFromRawValue
Exports
Exports
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ