Static task
static1
Behavioral task
behavioral1
Sample
e2d8c25f1a3de649d4e8951a4d602f7f71c1b4c8d91661ff14e922ecedec05e0.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e2d8c25f1a3de649d4e8951a4d602f7f71c1b4c8d91661ff14e922ecedec05e0.dll
Resource
win10v2004-20220812-en
General
-
Target
e2d8c25f1a3de649d4e8951a4d602f7f71c1b4c8d91661ff14e922ecedec05e0
-
Size
229KB
-
MD5
0ca9bb5cc82afc619ae7d983a2044e60
-
SHA1
b987ef59a126c5286a5780f4959e65d028b86d6e
-
SHA256
e2d8c25f1a3de649d4e8951a4d602f7f71c1b4c8d91661ff14e922ecedec05e0
-
SHA512
07296cc147d54b9adb13a19934bb0e2725ffe4b45a0e6f496ee05b5dc553f9e9d3f71aac3ff6dc6254632a3ea14d1e9f01b3abedb104babd1ab69a2c3fe20132
-
SSDEEP
6144:TELn/5Jkevd0ydglOvzy15c3egtAehMuW5B/Qgo7v:TGnR6evd0yEok5c5Aehe5lQgoD
Malware Config
Signatures
Files
-
e2d8c25f1a3de649d4e8951a4d602f7f71c1b4c8d91661ff14e922ecedec05e0.dll windows x86
c9cf6008a1d1ad593c814d30c4dcd6d9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryInfoKeyA
RegReplaceKeyA
RegQueryValueA
RegGetKeySecurity
RegOpenKeyA
RegEnumKeyW
RegQueryInfoKeyW
RegFlushKey
RegEnumKeyA
RegOpenKeyExW
RegEnumValueW
RegDeleteValueA
RegCreateKeyA
RegLoadKeyW
RegDeleteKeyA
RegDeleteKeyW
kernel32
AddAtomW
GetStdHandle
GetCPInfo
GlobalFree
FindAtomA
DeleteAtom
GetFileType
ReadFile
DeleteFileW
ExitProcess
OpenFileMappingA
WriteFile
GetCommandLineA
GetLastError
FindAtomW
GetPriorityClass
FindClose
GetFileTime
CopyFileExW
ExitThread
GetLocalTime
FlushFileBuffers
AddAtomA
CreateDirectoryA
CopyFileA
FatalExit
CopyFileExA
DeleteFileA
Sections
.b27h0 Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d3bd Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.38ghg Size: 176KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b230d Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e24b Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE