juRirLyiE
Static task
static1
Behavioral task
behavioral1
Sample
e6a806ffa78254edd80db90c132132aebe5686733f2d31531ec48051bc3e21b8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e6a806ffa78254edd80db90c132132aebe5686733f2d31531ec48051bc3e21b8.dll
Resource
win10v2004-20220812-en
General
-
Target
e6a806ffa78254edd80db90c132132aebe5686733f2d31531ec48051bc3e21b8
-
Size
170KB
-
MD5
8f99230fb2239843ca62545794a4f269
-
SHA1
dc483e654269f6310e06d35cd357d70e580b0058
-
SHA256
e6a806ffa78254edd80db90c132132aebe5686733f2d31531ec48051bc3e21b8
-
SHA512
960f55ed40e4b5a1c1b8f86d009288c4663fba25b77d56f7733f2a173703619a47f05a5f2aa036daaac16d5b3306d1032dd46af5e5ae7cb253e1cfc8df03debf
-
SSDEEP
3072:f16EOTnZc5YH1X9fQ3jxAYg4E8bcAwOVfXoLRsvUC:f16EOTnZc5YbfQ3KXp8bIOBYLRsvUC
Malware Config
Signatures
Files
-
e6a806ffa78254edd80db90c132132aebe5686733f2d31531ec48051bc3e21b8.dll windows x86
5eddc451a8fd7e00eb4731d356a3225e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterWindowMessageW
DefWindowProcA
IsWindow
RegisterClassA
CharLowerW
DestroyWindow
UnregisterClassA
CharNextW
SetWindowPos
GetWindowLongW
PostMessageA
SetWindowLongW
MoveWindow
LoadStringA
advapi32
InitializeSecurityDescriptor
IsValidSecurityDescriptor
GetFileSecurityA
InitializeAcl
RegEnumKeyExW
GetTokenInformation
GetSecurityDescriptorDacl
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
SetSecurityDescriptorDacl
GetAclInformation
RegCloseKey
GetLengthSid
AddAccessAllowedAce
RegEnumValueW
OpenProcessToken
GetAce
RegDeleteKeyW
CopySid
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ