Static task
static1
Behavioral task
behavioral1
Sample
e3ba9a93f0fd0044b55c038c1384aa20dd4208e282865d98390eb08800f59a0a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3ba9a93f0fd0044b55c038c1384aa20dd4208e282865d98390eb08800f59a0a.dll
Resource
win10v2004-20220812-en
General
-
Target
e3ba9a93f0fd0044b55c038c1384aa20dd4208e282865d98390eb08800f59a0a
-
Size
42KB
-
MD5
554b2f5115125007e0f156478d6e6430
-
SHA1
141033b5412aa34f7868c6c1b38b155b2e1468b1
-
SHA256
e3ba9a93f0fd0044b55c038c1384aa20dd4208e282865d98390eb08800f59a0a
-
SHA512
9ac2b38925946c3d7977821eeb43cc3124760a529f8f65fa8c086ff59275744785f303ae4d4e7e2b865589e1e9fff22d1da93904224a695a3f79fc9e1b1f5712
-
SSDEEP
768:VswaiYIUocC8kTp5WinUPyptWvkXykw1o9c:+wauUob8kBU6ptWvXBo
Malware Config
Signatures
Files
-
e3ba9a93f0fd0044b55c038c1384aa20dd4208e282865d98390eb08800f59a0a.dll windows x86
f8d836ffa00e7f663e3d48d689667ad6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ