Static task
static1
Behavioral task
behavioral1
Sample
eb0369b2f3be415a7c8b5fde8c2c676fa582d4146e97c5abdb45668a608ab857.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb0369b2f3be415a7c8b5fde8c2c676fa582d4146e97c5abdb45668a608ab857.dll
Resource
win10v2004-20221111-en
General
-
Target
eb0369b2f3be415a7c8b5fde8c2c676fa582d4146e97c5abdb45668a608ab857
-
Size
49KB
-
MD5
ec9ae814e5b700c724b2ff8a76b29ce1
-
SHA1
eeaf56d975b897b1d86b75074de0567613992142
-
SHA256
eb0369b2f3be415a7c8b5fde8c2c676fa582d4146e97c5abdb45668a608ab857
-
SHA512
8a06b78649c59e6bb6501d0c62f1bbe68153abd2355fb44547162707d1c89bfda7e005b9b02ba3c8a0801319032c6a8e63d7bb43d3c06f953e66711448703b91
-
SSDEEP
768:ncCMz5KmDAnUgZENj/kEPb+YVN5UtH/j3VXMoGxG2cLuLxhhn+lsV:nc7z59SNA8EPXILVXMoG0dLuLxhBDV
Malware Config
Signatures
Files
-
eb0369b2f3be415a7c8b5fde8c2c676fa582d4146e97c5abdb45668a608ab857.dll windows x86
a065f4a2b26f34b4e6acbd4b9cfa086f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteKeyW
SHQueryValueExW
SHCopyKeyA
SHDeleteEmptyKeyW
HashData
kernel32
HeapFree
GetProcessHeap
Beep
CreateFileMappingA
DeleteAtom
DeleteFileA
GetModuleFileNameA
GetCurrentProcessId
GetThreadLocale
IsValidLocale
ReleaseSemaphore
ResetEvent
GetStartupInfoA
ExitProcess
GetComputerNameA
BackupRead
lstrlenW
GetSystemDirectoryW
HeapAlloc
GetFileAttributesA
lstrcmpW
SetCurrentDirectoryA
GetSystemDirectoryA
ole32
OleRun
user32
ReleaseDC
advapi32
GetUserNameA
RegLoadKeyA
msvcrt
toupper
malloc
free
winmm
CloseDriver
OpenDriver
timeGetDevCaps
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ