EPScanEntry
Static task
static1
Behavioral task
behavioral1
Sample
b2f7277bae75ad3c08f7f877706728ed7384de3c2c100768efc7aa2f38243dbc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2f7277bae75ad3c08f7f877706728ed7384de3c2c100768efc7aa2f38243dbc.dll
Resource
win10v2004-20220901-en
General
-
Target
b2f7277bae75ad3c08f7f877706728ed7384de3c2c100768efc7aa2f38243dbc
-
Size
164KB
-
MD5
a2c39bd6c0bb47eacb24b2575e0ad070
-
SHA1
5cf6a8c2bfd57f3732a0649e1379ea5de1b4c583
-
SHA256
b2f7277bae75ad3c08f7f877706728ed7384de3c2c100768efc7aa2f38243dbc
-
SHA512
072778ead610642edab7af05d34e916b0150756c7ba37f4774cd519dc98715cb0f015b3e2d6c01b7f01860e78d403f432b676c3807127131b7c35c5467116996
-
SSDEEP
3072:p+rx5Fwh3jHx8D9bTIZL8tJjl7irAH0F8FX88LgPmWkR:p+V5Fwh3u9bEewrLCLgPmW
Malware Config
Signatures
Files
-
b2f7277bae75ad3c08f7f877706728ed7384de3c2c100768efc7aa2f38243dbc.dll windows x86
3b13c28ef451ae7625b5fca931300bea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetVersionExA
FindClose
FindNextFileA
FindFirstFileA
GetUserDefaultLCID
lstrlenA
CloseHandle
CreateFileA
WriteFile
ReadFile
SetFilePointer
GetFileSize
DeleteFileA
CopyFileA
GlobalLock
GlobalAlloc
GetDiskFreeSpaceA
GetModuleHandleA
GetTempFileNameA
IsDBCSLeadByte
FreeLibrary
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetModuleFileNameA
lstrcpyA
GlobalHandle
GlobalUnlock
GlobalFree
lstrcatA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
LCMapStringW
RtlUnwind
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
user32
SetWindowLongA
DialogBoxParamA
CharNextA
LoadStringA
GetSystemMetrics
GetWindowRect
MessageBoxA
GetDesktopWindow
SendDlgItemMessageA
SetWindowPos
GetWindowLongA
EndDialog
IsDlgButtonChecked
CheckDlgButton
advapi32
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ