smiCommonSched
Static task
static1
Behavioral task
behavioral1
Sample
e575049c91cbc9b2da445ac60efb5605a452ece3db6c6afa87a2736a6055a0ad.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e575049c91cbc9b2da445ac60efb5605a452ece3db6c6afa87a2736a6055a0ad.dll
Resource
win10v2004-20220812-en
General
-
Target
e575049c91cbc9b2da445ac60efb5605a452ece3db6c6afa87a2736a6055a0ad
-
Size
132KB
-
MD5
c1cd38220f01c98e70e4e9278797ff71
-
SHA1
8697923101d3249227951dd7d967ce7041bb0c56
-
SHA256
e575049c91cbc9b2da445ac60efb5605a452ece3db6c6afa87a2736a6055a0ad
-
SHA512
242adff72c6f16dc780eedca40fcc6f5feb98f0fa31a170b48c0722806136ce08d3b7a44331cf0d5c7114242c0ab11b7d200d900319c825cb8f460b37a8add60
-
SSDEEP
3072:7arhwrKq94Q1Ea0llMKdvw8t9QGR+JfY4Sh8OD56W0nA:7Gkx94QKa0leKdtt9CJw4ShbD7
Malware Config
Signatures
Files
-
e575049c91cbc9b2da445ac60efb5605a452ece3db6c6afa87a2736a6055a0ad.dll windows x86
8cdbf9815fd7fcc52274f831aba0331f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
LocalFree
LoadLibraryA
CopyFileA
GetProcAddress
GetModuleHandleA
MapViewOfFile
LeaveCriticalSection
ReleaseMutex
SetLastError
ExitProcess
InterlockedIncrement
OpenEventA
CloseHandle
GetCommandLineA
GetTickCount
GetModuleFileNameA
InterlockedCompareExchange
WaitForSingleObject
CreateEventA
CreateDirectoryA
InterlockedDecrement
UnmapViewOfFile
GetLastError
CreateProcessA
EnterCriticalSection
lstrlenA
lstrlenW
ole32
CreateBindCtx
OleCreate
OleSetContainedObject
CoUninitialize
CoInitialize
CoCreateGuid
user32
GetSystemMetrics
DispatchMessageA
PostMessageA
PostQuitMessage
GetClassNameA
GetMessageA
SendMessageA
DefWindowProcA
KillTimer
FindWindowA
SetTimer
GetParent
DestroyWindow
SetWindowLongA
TranslateMessage
GetWindowLongA
CreateWindowExA
RegisterWindowMessageA
advapi32
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
Exports
Exports
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ