Static task
static1
Behavioral task
behavioral1
Sample
e4573bc6e350c45aaa8250ea23e01ceb7d578f3fab3545106f70fa93bea97906.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e4573bc6e350c45aaa8250ea23e01ceb7d578f3fab3545106f70fa93bea97906.dll
Resource
win10v2004-20221111-en
General
-
Target
e4573bc6e350c45aaa8250ea23e01ceb7d578f3fab3545106f70fa93bea97906
-
Size
99KB
-
MD5
35c26c67be73bf058a9b1ca8a6e73f00
-
SHA1
c9c1362b8088caa412cf05c54f1d8ea29f0b335f
-
SHA256
e4573bc6e350c45aaa8250ea23e01ceb7d578f3fab3545106f70fa93bea97906
-
SHA512
2d2fac441cc5dae49ff51ac106d7efe5b3ddfb4b66132099f1e992e87a0f6cf5e9723b8cfa5bec0724a9162d6fe0232b9fdd2b9a8ee69a091f3431386e02c1fe
-
SSDEEP
3072:1sHg9T3j2Xt3WfZbZUzSHDLQndz5xF24/:119T3j29G4zOAx
Malware Config
Signatures
Files
-
e4573bc6e350c45aaa8250ea23e01ceb7d578f3fab3545106f70fa93bea97906.dll windows x86
97a7dd8ce6c793338774d3b054af21f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput
DirectInputCreateW
DirectInputCreateEx
DirectInputCreateA
kernel32
TlsGetValue
lstrlenA
lstrcpyA
lstrcatA
CloseHandle
CompareStringA
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceLanguagesW
ExitProcess
ExitThread
FreeResource
GetCommandLineA
GetDateFormatA
GetFileSize
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
OpenFile
ReadFile
RtlUnwind
SetCurrentDirectoryA
SetEndOfFile
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
VirtualAlloc
dsound
DirectSoundCaptureEnumerateA
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundCaptureCreate
shell32
ShellExecuteExA
ShellExecuteExW
ShellExecuteW
ShellExecuteA
SHBindToParent
SHGetMalloc
user32
EndPaint
LoadIconA
SetCursor
CloseWindow
BeginPaint
EndMenu
CreateMenu
olepro32
OleLoadPicture
OleCreateFontIndirect
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ