Static task
static1
Behavioral task
behavioral1
Sample
e77dc4c79604d81e6e49239338010afd42892283dd5ad06807f2f39b73dda870.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e77dc4c79604d81e6e49239338010afd42892283dd5ad06807f2f39b73dda870.dll
Resource
win10v2004-20220812-en
General
-
Target
e77dc4c79604d81e6e49239338010afd42892283dd5ad06807f2f39b73dda870
-
Size
387KB
-
MD5
90d118a4260021c7994e484ad4b4ccf0
-
SHA1
991d43d9a47fcbd1de971245e7b9175dc71ddd58
-
SHA256
e77dc4c79604d81e6e49239338010afd42892283dd5ad06807f2f39b73dda870
-
SHA512
b97aa8b07a5d607767db3d409640ec51068372136186783f845541cfa8a3f1ed9beff0707c1a75bd976deb91c797ee03ac78941355d81eed390ae33cb2d3434a
-
SSDEEP
12288:HW2dQCWOZyydjYIX1fWl7UiSIRYw/5nO:HWjCsUjnXQ7OIRz5O
Malware Config
Signatures
Files
-
e77dc4c79604d81e6e49239338010afd42892283dd5ad06807f2f39b73dda870.dll windows x86
b45fe45a9bf9520c93e17a24d8800b72
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcpy
memset
fflush
kernel32
MapUserPhysicalPages
GetModuleHandleW
GetLastError
OpenProcess
Toolhelp32ReadProcessMemory
GetCommConfig
SystemTimeToFileTime
GetNamedPipeHandleStateA
QueryDosDeviceW
AssignProcessToJobObject
SetLastError
GetProcAddress
pdh
PdhBrowseCountersW
PdhRemoveCounter
shlwapi
UrlCombineA
Sections
.text Size: 348KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ