Static task
static1
Behavioral task
behavioral1
Sample
eaaae2d768efc8bdb6af8a3645f35c94a87cb14c44e63e501cb21b4068cd673a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eaaae2d768efc8bdb6af8a3645f35c94a87cb14c44e63e501cb21b4068cd673a.dll
Resource
win10v2004-20221111-en
General
-
Target
eaaae2d768efc8bdb6af8a3645f35c94a87cb14c44e63e501cb21b4068cd673a
-
Size
193KB
-
MD5
94ced1e5700ba443a76642b44db225c2
-
SHA1
9dccb2b290a252a7ab55a63fe7ce64432aef9a5c
-
SHA256
eaaae2d768efc8bdb6af8a3645f35c94a87cb14c44e63e501cb21b4068cd673a
-
SHA512
b80da3f215c282d4f30a39bf0400ebb51e5d0d7843eee3d9a99e9120097fd736dd493e67ce3e77b51e7d803c1e89189b580f44e434fcbfcb199849820ab3e06e
-
SSDEEP
3072:soN/FrwxLlsSNzMttss9YZTGzsucYBsHh1CBGx+Wl/pqrzN:so5FrwxLmSVMtjxzTBGh1CBC+Wz2z
Malware Config
Signatures
Files
-
eaaae2d768efc8bdb6af8a3645f35c94a87cb14c44e63e501cb21b4068cd673a.dll windows x86
0badc9c4617ba5fc00d8e8b5597fd6e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
Sleep
GetModuleHandleA
VirtualProtect
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
msvcr110
_onexit
__clean_type_info_names_internal
_except_handler4_common
__dllonexit
_calloc_crt
_unlock
_lock
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
__FrameUnwindFilter
_cexit
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
user32
GetAsyncKeyState
shell32
ShellExecuteA
mscoree
_CorDllMain
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ