Static task
static1
Behavioral task
behavioral1
Sample
e7cb3505d2727578ccad7eecc375abfe0a0c210f1a8d6795e4a2246dda9fe9c3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7cb3505d2727578ccad7eecc375abfe0a0c210f1a8d6795e4a2246dda9fe9c3.dll
Resource
win10v2004-20221111-en
General
-
Target
e7cb3505d2727578ccad7eecc375abfe0a0c210f1a8d6795e4a2246dda9fe9c3
-
Size
405KB
-
MD5
30d013337c0cc628ece5cbdf50f2da90
-
SHA1
8f6b60cc60e7d1db91bc7173b5c71307bed05ebd
-
SHA256
e7cb3505d2727578ccad7eecc375abfe0a0c210f1a8d6795e4a2246dda9fe9c3
-
SHA512
b0b914c63b3a82a469b6dcdbe7d19974f689098fe31d74658341acb3ac211f8a9dc40816b63c7556c45f36037dee769065466dc17a6520a18cbbed6aa69db3ef
-
SSDEEP
12288:gYnoAi2pfGMI7SCNylbq4JMmLXzO666XqS:cAXKTUlODQb63S
Malware Config
Signatures
Files
-
e7cb3505d2727578ccad7eecc375abfe0a0c210f1a8d6795e4a2246dda9fe9c3.dll windows x86
60b5f3ca8972e405a74b1cd471690ecd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadProcessMemory
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
DrawTextA
MessageBoxA
gdi32
GetStockObject
advapi32
RegQueryValueExA
Sections
.text Size: - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MiniMH0 Size: - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MiniMH1 Size: - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.MiniMH2 Size: 403KB - Virtual size: 403KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ