Yeiowqcqz
Static task
static1
Behavioral task
behavioral1
Sample
ec919cedea2beca40160256e90a8e5d57ef5fe5486a70e558750d35d0df93ca2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ec919cedea2beca40160256e90a8e5d57ef5fe5486a70e558750d35d0df93ca2.dll
Resource
win10v2004-20221111-en
General
-
Target
ec919cedea2beca40160256e90a8e5d57ef5fe5486a70e558750d35d0df93ca2
-
Size
92KB
-
MD5
8bf7a14bbef1afd89c2598473b484137
-
SHA1
45f6e08d5013062ba0c1f03a5f26941202948c5b
-
SHA256
ec919cedea2beca40160256e90a8e5d57ef5fe5486a70e558750d35d0df93ca2
-
SHA512
7696c597e8f9ed052ca5dab6632def88ce3866136cdfcc1b50b0c325dd166094a3eaa9da05a20ef476001de901d9d1e6882119f55127fdcce512b0a66cccb5e3
-
SSDEEP
1536:lY/z7eSoPTqxCTj3ml9ZgwBJq42kcbe6JzKqgQ4q1nWCt432EYuOQIc:6N6I9Zg+J4kcSGzKqh91nXKSc
Malware Config
Signatures
Files
-
ec919cedea2beca40160256e90a8e5d57ef5fe5486a70e558750d35d0df93ca2.dll windows x86
21e9d64e691bb2fe603b14c000feffa4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
VirtualAlloc
GetProcAddress
LoadLibraryA
GetVersion
IsValidLocale
GetHandleInformation
GetModuleHandleA
gdi32
RectVisible
DPtoLP
SetViewportOrgEx
DeleteObject
GetDIBits
GetObjectType
CreatePalette
DeleteMetaFile
Rectangle
GetTextColor
SelectPalette
CreateFontIndirectW
StretchDIBits
CreateSolidBrush
LineTo
SetWindowOrgEx
Ellipse
GetViewportExtEx
SetTextAlign
CreateRectRgn
TranslateCharsetInfo
GetTextMetricsW
SetBrushOrgEx
DeleteDC
GetMapMode
GetCurrentObject
CreateBitmap
ExcludeClipRect
CloseMetaFile
MoveToEx
CreateMetaFileW
SelectClipRgn
GetObjectW
SetStretchBltMode
CreateMetaFileA
winspool.drv
EnumPrinterDataA
AddPrinterDriverA
DeletePrintProvidorA
DeletePrinterConnectionA
GetFormA
PrinterProperties
SetJobA
StartDocPrinterA
GetJobA
SetPrinterA
OpenPrinterA
DeletePrinterKeyA
DeletePrinterDataA
EndPagePrinter
ConnectToPrinterDlg
EnumPrinterDataExA
GetPrinterDriverA
EnumMonitorsA
AddPrintProvidorA
AddPortA
AddPrintProcessorA
GetPrinterDataA
DeleteFormA
SetPrinterDataExA
PrinterMessageBoxA
SetPortA
AddMonitorA
AbortPrinter
AddPrinterConnectionA
AddFormA
GetPrinterA
FindFirstPrinterChangeNotification
EndDocPrinter
DeviceCapabilitiesA
DeletePrinterDriverExA
DeleteMonitorA
GetPrintProcessorDirectoryA
FindClosePrinterChangeNotification
msvcrt
_onexit
__dllonexit
_adjust_fdiv
malloc
_unlink
_initterm
free
fwrite
printf
fread
fclose
fseek
ftell
fopen
memset
sprintf
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ