pwmhillrhaspt
Static task
static1
Behavioral task
behavioral1
Sample
2fd44123ef8d0138f6246d08c34beacc4cfe2cf9212a18489456202dc4da797c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2fd44123ef8d0138f6246d08c34beacc4cfe2cf9212a18489456202dc4da797c.dll
Resource
win10v2004-20220901-en
General
-
Target
2fd44123ef8d0138f6246d08c34beacc4cfe2cf9212a18489456202dc4da797c
-
Size
818KB
-
MD5
5d41ed246a61684ef6a7c9f7a1093e40
-
SHA1
3e22027ab57fd3610a2b0f471e50cb2cd71db950
-
SHA256
2fd44123ef8d0138f6246d08c34beacc4cfe2cf9212a18489456202dc4da797c
-
SHA512
361d98ea3f30c64b1377940f224f075ba10c0728b3c3a0ecbd6138d078a46360ca765004da34ab94ff1b3e9a082838fa3f453ed2f34862df3e9bd724d4506ac1
-
SSDEEP
24576:ZlwvXLP/a/xjwJuxUEQHvHX5EM/iG98s:TkLKZ6x3uc9X
Malware Config
Signatures
Files
-
2fd44123ef8d0138f6246d08c34beacc4cfe2cf9212a18489456202dc4da797c.dll windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 109KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ubgxinsh Size: 701KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xblmkkue Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE