InstallEacBidiComponents
Static task
static1
Behavioral task
behavioral1
Sample
a200c411ad1796a74ba14e08f30c3e579324386e54dbdb5bcddcff10cd41c66e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a200c411ad1796a74ba14e08f30c3e579324386e54dbdb5bcddcff10cd41c66e.dll
Resource
win10v2004-20220901-en
General
-
Target
a200c411ad1796a74ba14e08f30c3e579324386e54dbdb5bcddcff10cd41c66e
-
Size
80KB
-
MD5
0c9920e1ed003f6aeeb16a0c1a028f00
-
SHA1
0073aa4407ef1ad710423a753fe2a12406391b55
-
SHA256
a200c411ad1796a74ba14e08f30c3e579324386e54dbdb5bcddcff10cd41c66e
-
SHA512
d3ae14077206979872b17a539952f6192217b5cc022ca653b5401682ddba9106c891f497e7d0dc2a2d4860c258ae299daf4ef3db6d17a08ae5b74542bc4de2e4
-
SSDEEP
1536:hcE8yRQ4JyHPy9AhvkpDri6w1RPQk3D6Hzliqp1Wp0kuU:hcE8ULa69AmdiRjzclitpf
Malware Config
Signatures
Files
-
a200c411ad1796a74ba14e08f30c3e579324386e54dbdb5bcddcff10cd41c66e.dll windows x86
69656eb094f61537e0882faf048fc3ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcsrchr
free
_wcsicmp
_wtoi
wcsstr
_initterm
_adjust_fdiv
malloc
wcscmp
wcslen
_vsnwprintf
kernel32
CreateMutexW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
MultiByteToWideChar
CloseHandle
WaitForSingleObject
Sleep
CreateProcessW
OutputDebugStringW
FindClose
GetModuleFileNameW
GetModuleHandleW
FindFirstFileW
GetLastError
ReleaseMutex
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
winspool.drv
GetPrinterDriverDirectoryW
advapi32
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
msi
ord160
ord32
ord8
ord205
ord45
ord118
ord159
ord70
ord92
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ