Static task
static1
Behavioral task
behavioral1
Sample
e80e6d0e06f891e1d4889cbf52d7a9bd4c018ade110735e927e5bf3334957c85.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e80e6d0e06f891e1d4889cbf52d7a9bd4c018ade110735e927e5bf3334957c85.dll
Resource
win10v2004-20220812-en
General
-
Target
e80e6d0e06f891e1d4889cbf52d7a9bd4c018ade110735e927e5bf3334957c85
-
Size
22KB
-
MD5
f48d5b99a8c92c2da21cc99d4bcb6394
-
SHA1
2f11a70514ef016d6e6a17317551ac95c650e94e
-
SHA256
e80e6d0e06f891e1d4889cbf52d7a9bd4c018ade110735e927e5bf3334957c85
-
SHA512
bc541f59684a3a2468f7fa5459f8a65f25a5369034ae676c69975194d55a2bb5aaf3405151c25a1191eecfdc457368ad0ff577e1b9768b6acfe03dbe9592596d
-
SSDEEP
384:XZXB8Kg3+5MKxU99BVhn1Q5EI8fE5fcr2x2rUiiDyqi59qLM:BM4yVh12Em27UiiGqEsg
Malware Config
Signatures
Files
-
e80e6d0e06f891e1d4889cbf52d7a9bd4c018ade110735e927e5bf3334957c85.dll windows x86
2c1dca255fb0e1bbb2bfe6d2b05abc13
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
ReadProcessMemory
GetCurrentProcess
GlobalLock
GlobalAlloc
GetModuleHandleA
CreateThread
GetCurrentThreadId
DisableThreadLibraryCalls
GlobalFree
GlobalUnlock
TerminateThread
RaiseException
InitializeCriticalSection
GetPrivateProfileStringA
VirtualProtectEx
LeaveCriticalSection
EnterCriticalSection
SetThreadContext
OpenThread
SetUnhandledExceptionFilter
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
WriteProcessMemory
ResumeThread
ExitProcess
OpenProcess
TerminateProcess
LoadLibraryA
GetProcAddress
GetTickCount
Sleep
IsBadReadPtr
GetCurrentProcessId
OpenMutexA
WideCharToMultiByte
CreateMutexA
user32
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetForegroundWindow
GetWindowTextA
FindWindowA
GetWindowThreadProcessId
GetKeyState
imagehlp
ImageUnload
ImageLoad
shlwapi
PathFileExistsA
msvcrt
fread
fopen
free
_initterm
malloc
_adjust_fdiv
_stricmp
_strlwr
fclose
strstr
wcslen
strcmp
??2@YAPAXI@Z
strcat
sprintf
strcpy
strlen
memset
rand
srand
memcpy
strrchr
strncpy
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdata Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ