DllMain
Static task
static1
Behavioral task
behavioral1
Sample
e90eca8b9323c5df35d64897a69bd29c96d6b0bc9b373cd98bd6c317cca17abb.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
e90eca8b9323c5df35d64897a69bd29c96d6b0bc9b373cd98bd6c317cca17abb.dll
Resource
win10v2004-20220414-en
General
-
Target
e90eca8b9323c5df35d64897a69bd29c96d6b0bc9b373cd98bd6c317cca17abb
-
Size
160KB
-
MD5
237b67b8bb108854f88fdac7849ed0ff
-
SHA1
ee87823a0312914fa267b2da6d46caccb5fab1ae
-
SHA256
e90eca8b9323c5df35d64897a69bd29c96d6b0bc9b373cd98bd6c317cca17abb
-
SHA512
4e839f08304149ed32f8f72d8c3ee3ae906ddc767324e788d15445c56cfa8b907053f59e530f9301d51538dc7cbfa377368a7cbd8efffb5ca325ce466468c519
-
SSDEEP
3072:qJSAnJEE2trVv66SQH5FjxuhNMYaMbll59qy:qJV2lVc65dxqzS
Malware Config
Signatures
Files
-
e90eca8b9323c5df35d64897a69bd29c96d6b0bc9b373cd98bd6c317cca17abb.dll windows x64
5bd6f198f975962ce93969981194f2bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLogicalDrives
GetCommandLineW
GetThreadErrorMode
GetSystemDefaultUILanguage
GetThreadLocale
UnregisterApplicationRecoveryCallback
IsSystemResumeAutomatic
GetSystemDefaultLangID
GetACP
GetCommandLineA
GetTickCount64
GetLastError
GetThreadUILanguage
GetCurrentThread
TlsAlloc
SwitchToThread
GetCurrentProcessorNumber
GetErrorMode
UnregisterApplicationRestart
SetFileApisToOEM
GetEnvironmentStringsW
IsDebuggerPresent
GetOEMCP
GetCurrentProcess
GetUserDefaultLangID
GetUserDefaultUILanguage
GetLargePageMinimum
GetCurrentThreadId
GetTickCount
AreFileApisANSI
VirtualAlloc
ExitProcess
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
LCMapStringW
VirtualProtect
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
IsValidCodePage
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
user32
GetClipboardSequenceNumber
GetDesktopWindow
DestroyCaret
GetMessageExtraInfo
GetClipboardViewer
GetCursor
GetMessageTime
SetProcessDPIAware
CreateMenu
GetProcessWindowStation
GetFocus
GetOpenClipboardWindow
GetShellWindow
GetActiveWindow
AnyPopup
InSendMessage
GetCapture
CloseClipboard
EmptyClipboard
CountClipboardFormats
GetKBCodePage
IsProcessDPIAware
GetForegroundWindow
GetDialogBaseUnits
IsWow64Message
gdi32
GdiFlush
shell32
InitNetworkAddressControl
ole32
CoFreeUnusedLibraries
CoUninitialize
OleUninitialize
Exports
Exports
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ