Static task
static1
Behavioral task
behavioral1
Sample
e2e7b255dd265d979d382b11331474c519348ca25f62488d1da4664aac5619b1.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e2e7b255dd265d979d382b11331474c519348ca25f62488d1da4664aac5619b1.dll
Resource
win10v2004-20220901-en
General
-
Target
e2e7b255dd265d979d382b11331474c519348ca25f62488d1da4664aac5619b1
-
Size
56KB
-
MD5
53c88b7478969e6699cbd6e41f3e5ec3
-
SHA1
2707ff8304cd55744e5d1b64bca5dacdf30c267a
-
SHA256
e2e7b255dd265d979d382b11331474c519348ca25f62488d1da4664aac5619b1
-
SHA512
91c8f8d95a10d76a2fa0580a26809e9f30b6fbf998ea5c187611f7491bced724889b1d832c8cf630177f7cc8bef54f60364588b32bf4a5ffb82e3f370f4fac81
-
SSDEEP
1536:6LJ2rfBAN4GoEtL0ujDvL4WdYo1boOw/BDrJ3a7EwCEI:P84Po15w/BHJq7E2
Malware Config
Signatures
Files
-
e2e7b255dd265d979d382b11331474c519348ca25f62488d1da4664aac5619b1.dll windows x86
b14b1c875c9138e261daf3fcc894c9c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetVersion
GetModuleHandleW
LoadLibraryExW
GetProcAddress
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThread
DeviceIoControl
CreateMutexW
CreateThread
ResumeThread
CloseHandle
WaitForSingleObject
LeaveCriticalSection
LocalFree
FormatMessageW
GetSystemTime
VirtualProtect
GetLastError
GetCommandLineA
HeapSize
advapi32
OpenThreadToken
RegCloseKey
AccessCheck
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
ole32
CoCreateInstance
StringFromGUID2
rpcrt4
RpcServerInqBindings
RpcEpRegisterW
RpcStringBindingParseW
RpcStringFreeW
RpcEpUnregister
RpcBindingVectorFree
RpcImpersonateClient
RpcRevertToSelf
msvcrt
??3@YAXPAX@Z
_adjust_fdiv
malloc
memset
_wcsicmp
mbstowcs
_onexit
_lock
__dllonexit
_unlock
_amsg_exit
strtok
__CxxFrameHandler
time
_except_handler3
??2@YAPAXI@Z
free
_initterm
_vsnwprintf
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ