Static task
static1
Behavioral task
behavioral1
Sample
ee13f57ab03be1aba271772e54d2e900a03643cd500d2b7dfbbdc54cbfd562b2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ee13f57ab03be1aba271772e54d2e900a03643cd500d2b7dfbbdc54cbfd562b2.dll
Resource
win10v2004-20221111-en
General
-
Target
ee13f57ab03be1aba271772e54d2e900a03643cd500d2b7dfbbdc54cbfd562b2
-
Size
61KB
-
MD5
258ab919ec9ea4bc2d762e08c4e00a03
-
SHA1
451bed5855aec65514e70356eeba142fa658014a
-
SHA256
ee13f57ab03be1aba271772e54d2e900a03643cd500d2b7dfbbdc54cbfd562b2
-
SHA512
ab3c62cb8f45c9da7543eb875bfe905592fe4a0f09108bdc50161ed0fce1693324a667d89eed4dd0e693eda40d5b494f2f79ffcbb0445b53918ec0f3cc2dafe1
-
SSDEEP
768:p+wwpmhOBHrSoPCFvQMQyA5WEEN1GXgY+JN1KUfun+71Fc4vkaSoUMmQlxkIT:p+w3hS+5TQyA5W3Gw3b7Wni1FVvkuSI
Malware Config
Signatures
Files
-
ee13f57ab03be1aba271772e54d2e900a03643cd500d2b7dfbbdc54cbfd562b2.dll windows x86
c33bfea15e5bd347e9bf352be86f689b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
FileTimeToLocalFileTime
GetACP
GetCPInfo
GetCommandLineA
GetFileAttributesA
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemTimeAsFileTime
GetTimeZoneInformation
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedExchange
InterlockedIncrement
MultiByteToWideChar
RaiseException
ReadProcessMemory
ResetEvent
RtlUnwind
SetEnvironmentVariableA
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
WaitForSingleObject
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW
user32
CheckMenuItem
CreateMenu
DrawFrameControl
MsgWaitForMultipleObjects
GetSystemMetrics
GetMenuItemCount
EnumChildWindows
winmm
joyGetPos
joyConfigChanged
joyGetDevCapsA
ole32
CoTaskMemFree
CoCreateInstance
CoBuildVersion
advapi32
GetNumberOfEventLogRecords
LookupPrivilegeDisplayNameA
LookupSecurityDescriptorPartsW
LsaQueryInfoTrustedDomain
EnumDependentServicesW
RegQueryInfoKeyA
RemoveTraceCallback
SetEntriesInAclA
EncryptFileA
CryptSetProviderExA
CryptCreateHash
CloseEncryptedFileRaw
RegDeleteValueA
shlwapi
StrTrimA
StrToIntA
StrStrW
SHRegGetPathA
oleaut32
VarBstrCmp
VarBstrCat
SysStringLen
SysReAllocString
SetErrorInfo
SafeArrayDestroy
SafeArrayCreate
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayAccessData
RevokeActiveObject
RegisterTypeLi
OleIconToCursor
GetErrorInfo
ClearCustData
Sections
.text Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ