Static task
static1
Behavioral task
behavioral1
Sample
e1e73a054889722b5e4c392dfa47a1002aba8597a944736a737952a343b4bbfa.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1e73a054889722b5e4c392dfa47a1002aba8597a944736a737952a343b4bbfa.dll
Resource
win10v2004-20220812-en
General
-
Target
e1e73a054889722b5e4c392dfa47a1002aba8597a944736a737952a343b4bbfa
-
Size
2.0MB
-
MD5
5e7eea53000e25c2d581fcc1e308d7f9
-
SHA1
9544d91630cabeec919be4d53132611845f3e17a
-
SHA256
e1e73a054889722b5e4c392dfa47a1002aba8597a944736a737952a343b4bbfa
-
SHA512
281997cc6910e341e4e5de969ac3db28206f1d5d3fbcc070af4a1dfea72fd8c57710704e4fbf8dc92d49f0de12ad479bf0ae3c530c8a498dac74326b79ecd102
-
SSDEEP
1536:vt9czy6bwAhk1xASQU7fy4M29mvzjTzl2wD7z:TBmwtUS17fZpCzPD7
Malware Config
Signatures
Files
-
e1e73a054889722b5e4c392dfa47a1002aba8597a944736a737952a343b4bbfa.dll windows x86
68352c21cdb481f36bac08db7a49ffe6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gdi32
GetDeviceCaps
advapi32
RegQueryValueExW
msvcrt
abs
user32
GetDlgItem
Sections
.text Size: 62KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE