pgwbidrhmuqdbma
Static task
static1
Behavioral task
behavioral1
Sample
e49970faf83790744abff0c13dfeb1581ce3f8b1c020f519f5141e5ac654a584.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e49970faf83790744abff0c13dfeb1581ce3f8b1c020f519f5141e5ac654a584.dll
Resource
win10v2004-20220812-en
General
-
Target
e49970faf83790744abff0c13dfeb1581ce3f8b1c020f519f5141e5ac654a584
-
Size
815KB
-
MD5
21bb0cbb161b0867920b1c3bf5a0d511
-
SHA1
5ea4161c9db6b75d29f0e4ab02a25870ddc2961d
-
SHA256
e49970faf83790744abff0c13dfeb1581ce3f8b1c020f519f5141e5ac654a584
-
SHA512
707c1402ef07d454a6652591a333713f5b977c5121b54a095298d18b83bfd00b4ff942ece422dfc65f3ee0a4c63c907274e871ae1a1f8da068d02edc47ce2030
-
SSDEEP
24576:ishrUo6687dd6hwO+/3UtBw65lLULkzIV4A71w/lj:56BdYH+PV65lLWkzIiAW/l
Malware Config
Signatures
Files
-
e49970faf83790744abff0c13dfeb1581ce3f8b1c020f519f5141e5ac654a584.dll windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 109KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jlwnldkh Size: 697KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
grohteum Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE