EINTI
Static task
static1
Behavioral task
behavioral1
Sample
960453d6f16d893e6e8781e6d7f22c0932799f3746eca94a8fd832d7636b3e94.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
960453d6f16d893e6e8781e6d7f22c0932799f3746eca94a8fd832d7636b3e94.dll
Resource
win10v2004-20221111-en
General
-
Target
960453d6f16d893e6e8781e6d7f22c0932799f3746eca94a8fd832d7636b3e94
-
Size
960KB
-
MD5
43e60c17e99d119c6a695ac32046eb2e
-
SHA1
745b3aa2bed65fe2118034dfc31728d87e7a3fe6
-
SHA256
960453d6f16d893e6e8781e6d7f22c0932799f3746eca94a8fd832d7636b3e94
-
SHA512
36c76e564dce739544e5598aa21754650455110f4b0643a5e64088cd1dc747ed8ca451898bbea6e2e520ac65c93bad93da71a6f331231fc2f0e5351695e1a14f
-
SSDEEP
24576:CWuMGMlD3LWZ1d9VzmweaSyDcqHWa/YjAoT0hhNsGgtF5HTABWE/o2K:CWuMGMl7WZ1dTzneaSPqHr/Y2YGoTzF
Malware Config
Signatures
Files
-
960453d6f16d893e6e8781e6d7f22c0932799f3746eca94a8fd832d7636b3e94.dll windows x86
02efb971d1f8b1bf93f3a966e3a82a2b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
lstrlenA
GetProcAddress
user32
SendMessageA
msvcrt
_adjust_fdiv
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
strstr
rand
srand
time
free
_initterm
Exports
Exports
Sections
.EINTI Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 547B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text0 Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 464KB - Virtual size: 462KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ