Static task
static1
Behavioral task
behavioral1
Sample
e6b2615c009141fda5fbf7a1b35b272ab22945ef3abb54506e2ecf0cd23f135d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6b2615c009141fda5fbf7a1b35b272ab22945ef3abb54506e2ecf0cd23f135d.dll
Resource
win10v2004-20220812-en
General
-
Target
e6b2615c009141fda5fbf7a1b35b272ab22945ef3abb54506e2ecf0cd23f135d
-
Size
253KB
-
MD5
c495bff8861d49a5036f18a108cd2ef0
-
SHA1
ddce1a57cea8af525a73f150a5af8ca2a26d6478
-
SHA256
e6b2615c009141fda5fbf7a1b35b272ab22945ef3abb54506e2ecf0cd23f135d
-
SHA512
7b8d16f746e09120a0986a6811355a45fa3e8839bfd2baf57c5dda5a9b9ed60f1ba6ca263ca70f69aaaf122129948631d933515375b36bc5ed3cfbccd43000fd
-
SSDEEP
6144:X8YoU7PV6ENyUyXyyMj9zTwnHtuqWlYmFmQWEFZqJKF:P7P4EUNCyMj9nqH/WlY87WEziq
Malware Config
Signatures
Files
-
e6b2615c009141fda5fbf7a1b35b272ab22945ef3abb54506e2ecf0cd23f135d.dll windows x86
229e490409cc467e3a3bc7fb9b667a91
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2512
ord5731
ord2554
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord6375
ord4486
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord4274
ord561
ord825
ord815
ord3259
ord3147
ord3738
ord599
ord1578
ord1176
ord6412
ord1116
ord1168
ord1577
ord1575
ord342
ord1197
ord1182
ord269
ord826
ord600
ord1253
ord1243
ord1255
ord1570
msvcrt
__CxxFrameHandler
_EH_prolog
_adjust_fdiv
??2@YAPAXI@Z
free
malloc
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
kernel32
LocalFree
LocalAlloc
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE