Static task
static1
Behavioral task
behavioral1
Sample
eaeb874dffe3fbc65105d8816502ba56f1c5cdd1d8b54fc103f5d6e3cb63f5eb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaeb874dffe3fbc65105d8816502ba56f1c5cdd1d8b54fc103f5d6e3cb63f5eb.dll
Resource
win10v2004-20220901-en
General
-
Target
eaeb874dffe3fbc65105d8816502ba56f1c5cdd1d8b54fc103f5d6e3cb63f5eb
-
Size
7KB
-
MD5
9caa7c917b6717b49f6b1bb1540251cf
-
SHA1
43bb3093b223b3f1f0a08d4755fdebc6ffe20317
-
SHA256
eaeb874dffe3fbc65105d8816502ba56f1c5cdd1d8b54fc103f5d6e3cb63f5eb
-
SHA512
cfd7fbffb8537ce630f5521bfe4f88b6e0ccf0e72dab06149c6280bef85f73ebffceb426120ea201ef0f7976cd8b2758d1659fbbfcf3e49ba867d93f54c1705b
-
SSDEEP
192:xq10/ekOS1xEpSfkenoh4+gG9/5OCc9u6:xq2/h3keom+gGZ5
Malware Config
Signatures
Files
-
eaeb874dffe3fbc65105d8816502ba56f1c5cdd1d8b54fc103f5d6e3cb63f5eb.dll windows x86
e8d7cacd53720f45e22d6337c2c39300
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
LoadLibraryA
GetLastError
Sleep
GetModuleFileNameA
HeapFree
CreateThread
GetProcessHeap
HeapAlloc
user32
CallNextHookEx
SetWindowsHookExA
advapi32
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
RegOpenKeyExA
RegSetKeySecurity
RegCloseKey
FreeSid
RegSetValueExA
RegOpenKeyA
AllocateAndInitializeSid
msvcrt
_initterm
strrchr
_stricmp
free
_strcmpi
malloc
_adjust_fdiv
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ