Static task
static1
Behavioral task
behavioral1
Sample
e5a845a8f88e0358a5d6ca48604f6f746593c1dad6b1ad5dfe791f937eb68492.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e5a845a8f88e0358a5d6ca48604f6f746593c1dad6b1ad5dfe791f937eb68492.dll
Resource
win10v2004-20220812-en
General
-
Target
e5a845a8f88e0358a5d6ca48604f6f746593c1dad6b1ad5dfe791f937eb68492
-
Size
15KB
-
MD5
8508ed1aed3b53c017206f3171d604a9
-
SHA1
4b11d12e39dab5a4f7c6a2f7805d066ff88405a1
-
SHA256
e5a845a8f88e0358a5d6ca48604f6f746593c1dad6b1ad5dfe791f937eb68492
-
SHA512
923f869df32100f94a9d7ee02b8aea6ae9c47318902c78fa875d1859fa3dd0128454bbf4a13024c384e489513a18677b3977a9953fd2598c4930f9a8b708134b
-
SSDEEP
192:PGXccaK3de2g6ikjndR/qMB/5CS4YcM6qWQPuu53dG6OPoj3C1E:uMcaGdeZdad9H5C1MTWQ2u53I65j3EE
Malware Config
Signatures
Files
-
e5a845a8f88e0358a5d6ca48604f6f746593c1dad6b1ad5dfe791f937eb68492.dll windows x86
b7670d24cd2ecfa013616b39e1ff1b32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
atoi
strstr
kernel32
lstrcatA
lstrcmpiA
GetTempPathA
DeleteFileA
ReadFile
GetWindowsDirectoryA
WriteFile
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalFree
LoadLibraryExA
GetModuleFileNameA
LocalFree
GetFileSize
CreateFileA
CreateThread
lstrcpyA
advapi32
RegCloseKey
BuildExplicitAccessWithNameA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
SetEntriesInAclA
OpenSCManagerA
CreateServiceA
SetNamedSecurityInfoA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ