uzwlxfel
Static task
static1
Behavioral task
behavioral1
Sample
a778ba42d7bb8516d5dd766b5bced424c4771f74bf5d421edb511d6f413b5a41.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a778ba42d7bb8516d5dd766b5bced424c4771f74bf5d421edb511d6f413b5a41.dll
Resource
win10v2004-20220812-en
General
-
Target
a778ba42d7bb8516d5dd766b5bced424c4771f74bf5d421edb511d6f413b5a41
-
Size
88KB
-
MD5
3e1db1de056688ab4fbdcf2bacaf09bd
-
SHA1
e53e94ed71f1fa706ef3be5eade99fd22d1d819e
-
SHA256
a778ba42d7bb8516d5dd766b5bced424c4771f74bf5d421edb511d6f413b5a41
-
SHA512
8882d9b82a50e82c756cbdd3473f8293d80ebcd70ff33963b621633f43616894defd14acf766913b74b9de80c8543fb2e1a092b4cb6ef8c0536c33897416bd1d
-
SSDEEP
1536:V3fos6AEILMnhfKiV2bIzoZ4uVEv4qzzZDImqYpK+xD/H03R65Ja5NuPY:V3f96LAMnTV2oM4rvxImqZKm65iNuPY
Malware Config
Signatures
Files
-
a778ba42d7bb8516d5dd766b5bced424c4771f74bf5d421edb511d6f413b5a41.dll windows x86
da089da26bc7231a49daffaaacbcf2e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetErrorMode
FindFirstFileExA
SetFileAttributesA
GetFileSize
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
GetFullPathNameA
Sleep
ReadFile
GetModuleHandleA
SetEndOfFile
OpenProcess
GetProcessHeap
GetTickCount
HeapAlloc
DeleteFileA
GetTempPathA
GetFileInformationByHandle
CloseHandle
GetCurrentDirectoryA
GetPrivateProfileSectionA
FindNextFileA
GetPrivateProfileStringA
FindClose
GetTempFileNameA
CopyFileA
RemoveDirectoryA
FindFirstFileA
SetCurrentDirectoryA
GetFileAttributesA
WriteFile
ExpandEnvironmentStringsA
GetFileAttributesExA
GetCurrentProcess
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
OutputDebugStringA
HeapFree
SetFilePointer
advapi32
EqualDomainSid
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
IsWellKnownSid
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ