Static task
static1
Behavioral task
behavioral1
Sample
ec896802866063fa599558475c88b6829ef675623919c0519dab01a4a0888277.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec896802866063fa599558475c88b6829ef675623919c0519dab01a4a0888277.dll
Resource
win10v2004-20220812-en
General
-
Target
ec896802866063fa599558475c88b6829ef675623919c0519dab01a4a0888277
-
Size
101KB
-
MD5
826904ac80212238d71a943adf3daf50
-
SHA1
6a3f8d9d5d96d3ebb2a9579e0ba9a45385f0bd95
-
SHA256
ec896802866063fa599558475c88b6829ef675623919c0519dab01a4a0888277
-
SHA512
9d516264659dc16ed534ebd7fc753210cfc2473a0f6b72001d91f593c1a6ddb27185eb67e6c689d734ad24a42da1b1139b53bd0bda6c8b3b84d602d109bf4b94
-
SSDEEP
1536:qlMep3WhZfOZN1EAVNfDqCVxn+luYsVKZU3:qlMe8vfOZMA7XV5+UYEz
Malware Config
Signatures
Files
-
ec896802866063fa599558475c88b6829ef675623919c0519dab01a4a0888277.dll windows x86
f9fe250b2c8e7bb7ca4eb1e914e9baf5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr100
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
kernel32
EncodePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE