EpIpd_Entry
Static task
static1
Behavioral task
behavioral1
Sample
c4997cf39fb4ca56008b6625aea10903857c9ef981a47668fd386a1793772d3a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4997cf39fb4ca56008b6625aea10903857c9ef981a47668fd386a1793772d3a.dll
Resource
win10v2004-20220901-en
General
-
Target
c4997cf39fb4ca56008b6625aea10903857c9ef981a47668fd386a1793772d3a
-
Size
156KB
-
MD5
57dc5fd29b1e36d1742bb10b862c61f8
-
SHA1
6206bb0cb41c385b560dcc174e2ff152622412df
-
SHA256
c4997cf39fb4ca56008b6625aea10903857c9ef981a47668fd386a1793772d3a
-
SHA512
3d83b310c413e1a1f8f53461185df081d07d7fd6be458e539020e46a723b27a410ce90d05f93012b95137882d2218c3424cdd663f04228736f38b870c19b5ba3
-
SSDEEP
3072:pqb47l17vT5Z86FjAmYoI+YiaVi0VJa76kXUM3b:pqQbTA6pxaVi0q76k
Malware Config
Signatures
Files
-
c4997cf39fb4ca56008b6625aea10903857c9ef981a47668fd386a1793772d3a.dll windows x86
5e2c4f66a772a9dbf4028ec992602218
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CloseHandle
GetFileType
CreateFileA
ReadFile
WriteFile
SetFilePointer
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
SetEndOfFile
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RaiseException
GetProcAddress
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
RtlUnwind
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ