Static task
static1
Behavioral task
behavioral1
Sample
e8a977ad441be504e0825abcc6badf0a2045fa78e86c4be91e51e2c958ab5831.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e8a977ad441be504e0825abcc6badf0a2045fa78e86c4be91e51e2c958ab5831.dll
Resource
win10v2004-20221111-en
General
-
Target
e8a977ad441be504e0825abcc6badf0a2045fa78e86c4be91e51e2c958ab5831
-
Size
61KB
-
MD5
ec63bb1b6454a0e7615b49f01480c1ce
-
SHA1
3610cdcc1ec7a2c136db8458247daf3ff46ec216
-
SHA256
e8a977ad441be504e0825abcc6badf0a2045fa78e86c4be91e51e2c958ab5831
-
SHA512
e618c9296fbdc8d69bc9e643ab26325043eefae27543b4a05cea1d8ac9945ccaa19e43f6ac0e3dcd587b4da7d32c41438c28af103639a656286833ca3053868e
-
SSDEEP
1536:R0UDIgo9KEvnkFItL4Jgb/tZyxOfi48hbmIC/hAm:09fnkFCqa/+ci4UbmICKm
Malware Config
Signatures
Files
-
e8a977ad441be504e0825abcc6badf0a2045fa78e86c4be91e51e2c958ab5831.dll windows x86
e5845586619cd590492166aa65d93858
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetLastError
MultiByteToWideChar
IsValidCodePage
GlobalFree
InterlockedExchange
InterlockedCompareExchange
GlobalAlloc
DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersion
VirtualProtect
GetCommandLineA
Sleep
user32
GetWindowLongW
SetWindowLongW
gdi32
SetWindowOrgEx
DeleteDC
ExtTextOutW
TranslateCharsetInfo
GetObjectType
GetTextCharacterExtra
GetLayout
GetTextAlign
SetTextAlign
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetMapMode
GetGlyphIndicesW
SelectObject
DeleteObject
rpcrt4
NdrDllGetClassObject
msvcrt
malloc
_XcptFilter
_amsg_exit
__CxxFrameHandler
_except_handler3
free
_initterm
_adjust_fdiv
qsort
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ