EQZXN
Static task
static1
Behavioral task
behavioral1
Sample
3204897dde322d7eae24f4ce6c4e5154c8c4e79b122d70d8277bd215f7749856.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3204897dde322d7eae24f4ce6c4e5154c8c4e79b122d70d8277bd215f7749856.dll
Resource
win10v2004-20221111-en
General
-
Target
3204897dde322d7eae24f4ce6c4e5154c8c4e79b122d70d8277bd215f7749856
-
Size
816KB
-
MD5
5f5d7fd11d40a0c20a905283a79065f0
-
SHA1
a7de89582f6503c28d9ceaa1c10262db3c8832f5
-
SHA256
3204897dde322d7eae24f4ce6c4e5154c8c4e79b122d70d8277bd215f7749856
-
SHA512
23ea7bc993a5db7f4923cb20ea46969b46bbda608605d4565cabe0224b6961980cceb67b17efd9e800ac61235149759af136dcef1d878e23e59ffff91728efe1
-
SSDEEP
12288:ipu+FUxDrn6yzdW88ilI1qv5w5mLjzdWEXVBK0iTqAZq9z7h:i4+mDT6yU8Pl/v5w29vquAght
Malware Config
Signatures
Files
-
3204897dde322d7eae24f4ce6c4e5154c8c4e79b122d70d8277bd215f7749856.dll windows x86
f5974799d1001d6d8214056e73379798
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
lstrlenA
GetProcAddress
user32
SendMessageA
SetWindowTextA
GetWindowTextA
msvcrt
__dllonexit
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
atoi
rand
srand
time
_except_handler3
_onexit
free
_initterm
malloc
_adjust_fdiv
msvcp60
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Exports
Exports
Sections
.EQZXN Size: 408KB - Virtual size: 406KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 835B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text0 Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 216KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ