Static task
static1
Behavioral task
behavioral1
Sample
e747573019d7e8d3d8309395b2ba8cabd658382bcb5fc6cdb3629c3e073e74b8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e747573019d7e8d3d8309395b2ba8cabd658382bcb5fc6cdb3629c3e073e74b8.dll
Resource
win10v2004-20220812-en
General
-
Target
e747573019d7e8d3d8309395b2ba8cabd658382bcb5fc6cdb3629c3e073e74b8
-
Size
159KB
-
MD5
ebc3c5afdd766ea2c5298640c328aa43
-
SHA1
34855d8a86dfcfdcd2bad09a83dcc68110860d0d
-
SHA256
e747573019d7e8d3d8309395b2ba8cabd658382bcb5fc6cdb3629c3e073e74b8
-
SHA512
b01e8aa660e275b3e6620e286002dcd4d47a77227df0bda1eeb5b661c60ffc72e164c1a78859b912bc6129c6318d115744a2a65459f239c65f604afadcd11852
-
SSDEEP
3072:asl1mAya2jlIcKmSIU7hWvpDjps0nOxb55xOynul:f1oZl7Rfp0bQ
Malware Config
Signatures
Files
-
e747573019d7e8d3d8309395b2ba8cabd658382bcb5fc6cdb3629c3e073e74b8.dll windows x86
e081a2facda2af0e894e713e221356fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetCurrentProcess
VirtualProtect
IsBadReadPtr
Sleep
VirtualAlloc
OutputDebugStringA
TerminateThread
GetCurrentThread
GetLocalTime
CreateThread
Beep
ExitProcess
DisableThreadLibraryCalls
CloseHandle
FreeLibrary
CreateFileA
DeviceIoControl
GetLastError
SetPriorityClass
GetVersionExA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
VirtualFree
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
user32
GetAsyncKeyState
SetRect
d3dx9_42
D3DXMatrixInverse
D3DXCreateLine
D3DXCreateFontA
D3DXVec3Project
wininet
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ