hpwbf
Static task
static1
Behavioral task
behavioral1
Sample
e28ef38e4d0260bc22c49491d1148474e8a67f88dbfcf973290fb19c6d7faab8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e28ef38e4d0260bc22c49491d1148474e8a67f88dbfcf973290fb19c6d7faab8.dll
Resource
win10v2004-20220812-en
General
-
Target
e28ef38e4d0260bc22c49491d1148474e8a67f88dbfcf973290fb19c6d7faab8
-
Size
480KB
-
MD5
722dd294c84173842df01bc1148ef935
-
SHA1
9594a5d8af593e686bf82bafe61e5da678daf28f
-
SHA256
e28ef38e4d0260bc22c49491d1148474e8a67f88dbfcf973290fb19c6d7faab8
-
SHA512
f0a6475299ea53ac5f253f9a2f55a38d1fed212f4c68e92580e30b64de92607d6070f49588976412c3499180f1050eeea6e75ec5249126ed64d51758102a9100
-
SSDEEP
12288:PzD7fBo3KhuMs/VYyA5GL3EDYCw9Ji3jzy:7DTBo6hJGYyA5GL0vPy
Malware Config
Signatures
Files
-
e28ef38e4d0260bc22c49491d1148474e8a67f88dbfcf973290fb19c6d7faab8.dll windows x86
76617e1a081d29216f976c00e1630357
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
wsprintfA
CharNextA
LoadStringA
CharPrevA
MessageBoxExA
advapi32
GetSidLengthRequired
FreeSid
GetSecurityDescriptorDacl
RegEnumValueA
SetFileSecurityA
SetSecurityDescriptorDacl
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegOpenKeyExA
RegCloseKey
InitializeSid
RegQueryValueExA
AllocateAndInitializeSid
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Exports
Exports
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 409KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ