?Switchblades@@YAXPAXHPADPAPAU_stack_t@@PAUextra_parameters@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
ef1fc9150b76172899a5ffda1a09f4cbfaeba654806bd68870865e6c5c2a276f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef1fc9150b76172899a5ffda1a09f4cbfaeba654806bd68870865e6c5c2a276f.dll
Resource
win10v2004-20220901-en
General
-
Target
ef1fc9150b76172899a5ffda1a09f4cbfaeba654806bd68870865e6c5c2a276f
-
Size
28KB
-
MD5
440600834eea93bf6d438a3566a67d4f
-
SHA1
abd7abdfd04b02a68be26cfc838957a0c1e07e7c
-
SHA256
ef1fc9150b76172899a5ffda1a09f4cbfaeba654806bd68870865e6c5c2a276f
-
SHA512
ed8b4ad6a28c96892a5cf39c2703d17a525986038f831efec263530d8dfe1b551bcb156a2fb8be5944b558af49df8292497772cf8ebaf060e25da1d1de5068f3
-
SSDEEP
768:6Yx113sC8O4giCW5t5cMpLs81Hv1DFL+Xou8Z5X:pxn3sNHVCuAMpoilFL+XoTZB
Malware Config
Signatures
Files
-
ef1fc9150b76172899a5ffda1a09f4cbfaeba654806bd68870865e6c5c2a276f.dll windows x86
ba054110b4406a209a1d1657e38bac9a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetStringTypeA
GetLastError
RaiseException
RtlUnwind
SetConsoleCtrlHandler
VirtualAlloc
VirtualFree
SetUnhandledExceptionFilter
WriteConsoleA
GetStdHandle
ExitProcess
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
GetTickCount
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
GetVersion
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Exports
Exports
Sections
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT$XIA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 28B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE