EnumDriveModeRelease
Static task
static1
Behavioral task
behavioral1
Sample
e33769d68cdb6c2bc542663738d27646e70a975136dde084f24ff350624480bf.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e33769d68cdb6c2bc542663738d27646e70a975136dde084f24ff350624480bf.dll
Resource
win10v2004-20220812-en
General
-
Target
e33769d68cdb6c2bc542663738d27646e70a975136dde084f24ff350624480bf
-
Size
248KB
-
MD5
82102385c63ac816a448d518f6f112a0
-
SHA1
e425f5b6b507a492cef0eaf4bc0ff3ef19bd2955
-
SHA256
e33769d68cdb6c2bc542663738d27646e70a975136dde084f24ff350624480bf
-
SHA512
c0e92345df58cc380c70d8cf6763231a60e22d633b6b069798949593fb83e033b22c9c1f1b6d6b8884ec2c274a4935daa77355ea27ef56748dc6f4113688361d
-
SSDEEP
6144:+TxlEacxm8wS7x7Qt+BxdBmW/lrRjJ76wtaZUmcZUY7:+FS/ogCt+BxaWb07
Malware Config
Signatures
Files
-
e33769d68cdb6c2bc542663738d27646e70a975136dde084f24ff350624480bf.dll windows x86
69331320e6ad18b22a514de533126bfa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
ExpandEnvironmentStringsA
FileTimeToSystemTime
GetACP
GetCommandLineA
GetConsoleCP
GetCurrentProcessId
GetExitCodeThread
GetFileAttributesA
GetModuleHandleA
GetProcessHeap
GetSystemInfo
GetVersionExA
GlobalAlloc
HeapAlloc
HeapCreate
HeapDestroy
InitializeCriticalSection
LeaveCriticalSection
LocalAlloc
OpenEventA
ReadFile
ReadProcessMemory
UnmapViewOfFile
WaitForMultipleObjects
lstrcmpA
lstrcpynA
lstrlenA
advapi32
ChangeServiceConfigA
CreateServiceW
InitializeSecurityDescriptor
LookupSecurityDescriptorPartsW
QueryServiceConfig2W
msvcrt
exit
__set_app_type
vswprintf
__p__fmode
__p__commode
strspn
sscanf
rand
__getmainargs
fwprintf
ole32
IsEqualGUID
CoGetApartmentID
CreateDataCache
ddraw
DirectDrawEnumerateExA
DirectDrawEnumerateA
DirectDrawCreate
GetSurfaceFromDC
crypt32
CertRegisterSystemStore
CryptBinaryToStringW
CryptMemFree
CertCreateCRLContext
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ