ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
e1f3851bf718ffae24f50d7f0a08179f50c99f8934de87dcf922a580a6d22a8d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1f3851bf718ffae24f50d7f0a08179f50c99f8934de87dcf922a580a6d22a8d.dll
Resource
win10v2004-20220812-en
General
-
Target
e1f3851bf718ffae24f50d7f0a08179f50c99f8934de87dcf922a580a6d22a8d
-
Size
72KB
-
MD5
43e7e28d6b4b3cbc9de598e140c05501
-
SHA1
e838e58b77b1e57ffbcc53f0ca7247da44f18fbb
-
SHA256
e1f3851bf718ffae24f50d7f0a08179f50c99f8934de87dcf922a580a6d22a8d
-
SHA512
49251f0d4f75fd84f7b8eeed230e2fb5ff7c7401edee3e00155e5fb6f4901059c90b5ea1ca6408c25e8a647338ae309d30ea895e9d9713b38c97bada5e62ca82
-
SSDEEP
1536:HX8vAAxXwyAW/64mMUIy4Io60kq0kfcc/oTFatErt:HX849WvRY0kq1Uc/oTFTt
Malware Config
Signatures
Files
-
e1f3851bf718ffae24f50d7f0a08179f50c99f8934de87dcf922a580a6d22a8d.dll windows x86
c80df0520be20f782386f01c6fdf86a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetModuleFileNameA
WriteProcessMemory
VirtualAllocEx
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
lstrcpyA
DeleteFileA
Sleep
HeapFree
HeapAlloc
GetProcessHeap
WaitForSingleObject
CreateThread
ReleaseMutex
SetErrorMode
SetUnhandledExceptionFilter
GetTickCount
CreateMutexA
FreeConsole
WideCharToMultiByte
MoveFileExA
MoveFileA
lstrcatA
GetSystemDirectoryA
MultiByteToWideChar
WriteFile
CreateProcessA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
user32
wsprintfA
iphlpapi
GetAdaptersInfo
shlwapi
SHDeleteKeyA
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
strncpy
__CxxFrameHandler
_CxxThrowException
sprintf
_except_handler3
strchr
wcslen
rand
srand
time
strstr
atoi
_errno
_vsnprintf
memmove
memchr
toupper
free
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ