ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
e30cbd379f206f26dcd69d98f132cd4cd803e3db4c6730262e206b960c760418.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e30cbd379f206f26dcd69d98f132cd4cd803e3db4c6730262e206b960c760418.dll
Resource
win10v2004-20221111-en
General
-
Target
e30cbd379f206f26dcd69d98f132cd4cd803e3db4c6730262e206b960c760418
-
Size
148KB
-
MD5
98e652c0769339e83f80dee399a434f6
-
SHA1
33e8255cb8a7d38761d1ddd83fddcdc751434f14
-
SHA256
e30cbd379f206f26dcd69d98f132cd4cd803e3db4c6730262e206b960c760418
-
SHA512
a25347c0708bcc304942c1ae29130f29bda11f7d9f8850c9311ce935c0e38e054661eab1b82502bde7a5cfbdc836360c25c2575bc135d974190a565821fe4f7d
-
SSDEEP
3072:1AM3Oi0gW3cDDkCCXZ39Ci+8LXbTTy3YJ0O+ZKxDiQ:/eukTb3vy00BYxD7
Malware Config
Signatures
Files
-
e30cbd379f206f26dcd69d98f132cd4cd803e3db4c6730262e206b960c760418.dll windows x86
6f39901d2e232c5f8bc1051cf47288dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
SetDIBColorTable
wsock32
WSACleanup
ws2_32
inet_addr
winmm
waveInUnprepareHeader
msacm32
acmStreamUnprepareHeader
shell32
ShellExecuteA
wininet
InternetReadFile
urlmon
URLDownloadToFileA
avicap32
capGetDriverDescriptionA
msvfw32
ICCompressorFree
imm32
ImmReleaseContext
Exports
Exports
Sections
�P�� Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�F�� Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SRAT Size: - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ