Static task
static1
Behavioral task
behavioral1
Sample
8ec5024b706eb674ede7943fe45fca5a75809f3ee2421e660665fd69c1064fd7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ec5024b706eb674ede7943fe45fca5a75809f3ee2421e660665fd69c1064fd7.dll
Resource
win10v2004-20221111-en
General
-
Target
8ec5024b706eb674ede7943fe45fca5a75809f3ee2421e660665fd69c1064fd7
-
Size
77KB
-
MD5
91c55c00f3bb4a7f7cbf7814ff3fd1c0
-
SHA1
531eef34ca5d7a7681a7db34ed5167a566718c66
-
SHA256
8ec5024b706eb674ede7943fe45fca5a75809f3ee2421e660665fd69c1064fd7
-
SHA512
6cc64a193d62183c25ee581c5ad9c10a9cc28f859cc88f010e1505d166df6ceefe347e3e0a8dadc7d2e89cb15456f71d2c244228f967d1a28031d4d68387d9d9
-
SSDEEP
1536:jqfZKLnLmewvOMh0NaDHaIBfQJggNxXeU:JovmJHN
Malware Config
Signatures
Files
-
8ec5024b706eb674ede7943fe45fca5a75809f3ee2421e660665fd69c1064fd7.dll windows x86
b9f68ffa5776ce4509c93eab56f2d7ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateConsoleScreenBuffer
DisableThreadLibraryCalls
ExitProcess
ExitThread
FindClose
FindFirstFileA
GetACP
GetCommandLineA
GetFileTime
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcessAffinityMask
GetStartupInfoA
GetStdHandle
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
MultiByteToWideChar
RtlUnwind
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
TerminateThread
UnhandledExceptionFilter
WriteConsoleW
WriteFile
lstrlenA
user32
RemoveMenu
KillTimer
IsDialogMessageA
InvalidateRgn
GetWindowRect
GetSysColorBrush
GetDlgItem
EnableWindow
DrawTextA
DialogBoxIndirectParamA
comctl32
InitMUILanguage
FlatSB_SetScrollProp
advapi32
BuildExplicitAccessWithNameW
GetSecurityDescriptorOwner
ConvertAccessToSecurityDescriptorW
BackupEventLogW
RegGetKeySecurity
RegOpenUserClassesRoot
IsValidSecurityDescriptor
olepro32
OleIconToCursor
OleCreateFontIndirect
security
EnumerateSecurityPackagesA
EnumerateSecurityPackagesW
AddSecurityPackageW
AddSecurityPackageA
Sections
.text Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ