zgzqys
Static task
static1
Behavioral task
behavioral1
Sample
a2e5ef01a2690d0e309b931f094a41b187bddc3497f8f09aaccaad5a1db96143.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2e5ef01a2690d0e309b931f094a41b187bddc3497f8f09aaccaad5a1db96143.dll
Resource
win10v2004-20220812-en
General
-
Target
a2e5ef01a2690d0e309b931f094a41b187bddc3497f8f09aaccaad5a1db96143
-
Size
164KB
-
MD5
c417cabe0013ff3920032549d4fe657c
-
SHA1
6ea1f5c2219e62f650574b5c3286eb81f0a35a1d
-
SHA256
a2e5ef01a2690d0e309b931f094a41b187bddc3497f8f09aaccaad5a1db96143
-
SHA512
fb7ce517d1b16a52634aa40feaf5d681c663e3ff1552c9416546af736438e6749f6881b80f738c0199ae972ad7d3e1b895ed66162def3ba13db1022fb43c2f7b
-
SSDEEP
3072:lhS0yyNOwqGwwZp9OYnUjTiUwaWccFPpXvn5VwiWsw+OxCu:lCyNO6wwn9JnUjnzQ/noiWt+OxC
Malware Config
Signatures
Files
-
a2e5ef01a2690d0e309b931f094a41b187bddc3497f8f09aaccaad5a1db96143.dll windows x86
b30ec06487407f2ee20df40532218ff8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
CompareStringA
lstrlenA
lstrcmpA
GetVersionExA
GetModuleFileNameA
GetProcessHeap
SetFileAttributesA
MoveFileA
GetSystemTimeAsFileTime
GetFileTime
GetTempPathA
CloseHandle
GetFileSize
LocalFree
FormatMessageA
GetLastError
CreateFileA
InterlockedExchange
Sleep
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
HeapFree
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MapViewOfFile
MultiByteToWideChar
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
GetVersionExW
SetLastError
LoadResource
FindResourceExW
LoadLibraryExW
FreeLibrary
CreateFileMappingW
CreateFileW
GetLocaleInfoW
GetTickCount
HeapAlloc
ole32
CoInitialize
CoCreateInstance
CoUninitialize
user32
MessageBoxA
LoadStringA
advapi32
GetSecurityDescriptorOwner
Exports
Exports
Sections
.text Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 742B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ