Static task
static1
Behavioral task
behavioral1
Sample
ebe509678bfb434a345affe670624f40de32ca70d94ef6a59be0ae9c8410be60.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ebe509678bfb434a345affe670624f40de32ca70d94ef6a59be0ae9c8410be60.dll
Resource
win10v2004-20220812-en
General
-
Target
ebe509678bfb434a345affe670624f40de32ca70d94ef6a59be0ae9c8410be60
-
Size
308KB
-
MD5
66d0bbdf8a0f573be0b46c2933ec7b51
-
SHA1
2ee3e7182c676e22794fe858c4da907ee66729b1
-
SHA256
ebe509678bfb434a345affe670624f40de32ca70d94ef6a59be0ae9c8410be60
-
SHA512
02b3520adbd89a5f2e990a9364ed18240e00b79c4f6b03fe2f0e125e99067500d30e7922d45c5b21e62ff0a7935947f649e8cd0f01b4eb7ef053ad8e900504ee
-
SSDEEP
6144:JtYwp0lok1yoanT+H/X9825VeLYbbjZ+M+5hi22upe8EC6f0aB:Vp8panT+H/X9nvFn5+/2upzEC6RB
Malware Config
Signatures
Files
-
ebe509678bfb434a345affe670624f40de32ca70d94ef6a59be0ae9c8410be60.dll windows x86
1a4f68363ac38fcf8ae88d8cb6e8c0d3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
user32
CheckMenuItem
GetCursorPos
BeginDeferWindowPos
gdi32
LineTo
CreateCompatibleDC
Sections
.text Size: 231KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ