Static task
static1
Behavioral task
behavioral1
Sample
1e81ceb739f1b2d22aef2188951868d661787ae8b0555cdd7f75d8d06ce0fccf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e81ceb739f1b2d22aef2188951868d661787ae8b0555cdd7f75d8d06ce0fccf.dll
Resource
win10v2004-20220812-en
General
-
Target
1e81ceb739f1b2d22aef2188951868d661787ae8b0555cdd7f75d8d06ce0fccf
-
Size
66KB
-
MD5
6a86dde0d6dc86508d201f5c61e8c2b0
-
SHA1
0ef75aa325780e3834d0be1219b2cd6b99993424
-
SHA256
1e81ceb739f1b2d22aef2188951868d661787ae8b0555cdd7f75d8d06ce0fccf
-
SHA512
6955aaf473580f99b39a85b03fdcfafe36de8ead36d272569d8debb308023564287696385d895ce750253764be0082fb55aa5ae2525ef401d50add7ae1025139
-
SSDEEP
1536:eEPzXNLM+obpZAxpmT7wBmcK3RIzfPKkP3V:eEPzXu+iZAAEYbKzfPKq
Malware Config
Signatures
Files
-
1e81ceb739f1b2d22aef2188951868d661787ae8b0555cdd7f75d8d06ce0fccf.dll windows x86
4ef97d8d43a1a85058e318f7a2400a53
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetACP
GetCommandLineA
GetEnvironmentVariableA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStringTypeW
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
MultiByteToWideChar
ReadFile
ReadProcessMemory
RtlUnwind
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
VirtualQueryEx
user32
PostMessageA
GetDlgCtrlID
ReleaseDC
ExitWindowsEx
winmm
joySetThreshold
joyConfigChanged
joy32Message
timeBeginPeriod
ole32
CoCreateInstance
CoTaskMemAlloc
CoCreateGuid
advapi32
BuildImpersonateTrusteeW
IsValidSid
DuplicateTokenEx
RegQueryValueA
SetEntriesInAuditListA
shlwapi
StrToIntA
StrStrW
SHRegGetPathA
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ