QueryInterface
Static task
static1
Behavioral task
behavioral1
Sample
e0097561c909d49ff64b899ef4ce2e56efa3fd740dfe8c0650be6c9e3685273b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e0097561c909d49ff64b899ef4ce2e56efa3fd740dfe8c0650be6c9e3685273b.dll
Resource
win10v2004-20221111-en
General
-
Target
e0097561c909d49ff64b899ef4ce2e56efa3fd740dfe8c0650be6c9e3685273b
-
Size
128KB
-
MD5
521ba6645e5feb124bf558037b02f805
-
SHA1
551be1ed74685da2aa9c15f7433aa62345ca5e91
-
SHA256
e0097561c909d49ff64b899ef4ce2e56efa3fd740dfe8c0650be6c9e3685273b
-
SHA512
ef913e4d6903eab17311e5ec2f52c7952b936f9d5819fd09c48236cab43624ddb4e854974abb36ddd5f16123b0111dc2c5dfb833f5eb4aa79a6edb61204c9166
-
SSDEEP
1536:KR2+boyBv1eyFC4cY3tcNKafgixNpdJvVy5xWtF92Re8NxP4al5cbfKjWmEP:K8lyBv1e6dmhHmxP4alAfgE
Malware Config
Signatures
Files
-
e0097561c909d49ff64b899ef4ce2e56efa3fd740dfe8c0650be6c9e3685273b.dll windows x86
ee0f57e2aff7648c883ac4385f1e661a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetProcAddress
LoadLibraryA
GetModuleHandleA
UnmapViewOfFile
VirtualAlloc
MapViewOfFile
CloseHandle
CreateFileMappingA
CreateFileA
GetCurrentProcessId
GetTickCount
GetLocalTime
SetFilePointer
CopyFileA
FreeLibrary
DisableThreadLibraryCalls
GetModuleFileNameA
VirtualProtect
ReadProcessMemory
GetCurrentProcess
WriteProcessMemory
WriteFile
ReadFile
GetFileSize
GetVersionExA
GetSystemInfo
RtlUnwind
RaiseException
ExitProcess
GetCurrentThreadId
GetCommandLineA
HeapAlloc
HeapFree
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
TerminateProcess
HeapSize
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
UnhandledExceptionFilter
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
MessageBeep
wsprintfW
wsprintfA
SendMessageA
wvsprintfA
Exports
Exports
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 721KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ