Elmpt
Static task
static1
Behavioral task
behavioral1
Sample
75a6ece2e1186493a24c9f975faa8c4f46a21c04cd5bfb60bbfce295ab10df27.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
75a6ece2e1186493a24c9f975faa8c4f46a21c04cd5bfb60bbfce295ab10df27.dll
Resource
win10v2004-20220812-en
General
-
Target
75a6ece2e1186493a24c9f975faa8c4f46a21c04cd5bfb60bbfce295ab10df27
-
Size
592KB
-
MD5
48bc8a18350bbd05fa66cbef43542170
-
SHA1
6d1029a6b231656b2998c1d22151b69023bbf4f7
-
SHA256
75a6ece2e1186493a24c9f975faa8c4f46a21c04cd5bfb60bbfce295ab10df27
-
SHA512
554ac31806025e40ccd563e3e667d5fc55d2740dca53984b7e8256c65874907e449fcad96eb366b4ce36e2b1aeaf8382499e663209d4655becfdd427644267f4
-
SSDEEP
12288:rEtAA30Ae3D5eN4i8X0RfZnoIAZ1eSBBAbgiavOJlqH:r0AA30Ae3D5eNxRfqZ8qiavOXqH
Malware Config
Signatures
Files
-
75a6ece2e1186493a24c9f975faa8c4f46a21c04cd5bfb60bbfce295ab10df27.dll windows x86
9763efbe0532e2c22c76f62a53284fc4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptEnumProvidersW
CryptGetKeyParam
EncryptFileW
LookupPrivilegeDisplayNameA
LsaICLookupNames
ObjectCloseAuditAlarmW
QueryServiceLockStatusA
RegSaveKeyW
OpenBackupEventLogW
SetEntriesInAuditListA
GetSecurityDescriptorControl
OpenProcessToken
OpenThreadToken
RegCloseKey
BuildTrusteeWithNameA
CryptDestroyKey
ConvertAccessToSecurityDescriptorA
LsaCreateSecret
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegSetValueExA
gdi32
CombineRgn
CreateRectRgn
CreateSolidBrush
EnumMetaFile
ExtSelectClipRgn
GdiStartPageEMF
GetTextExtentPoint32A
GetWinMetaFileBits
OffsetViewportOrgEx
Polyline
CopyEnhMetaFileA
EnumFontsA
GetDeviceCaps
GdiGetDC
CreateDIBPatternBrush
SetLayout
kernel32
VirtualAlloc
CommConfigDialogW
EnumDateFormatsW
FlushInstructionCache
GetCurrentProcess
GetDiskFreeSpaceExA
GetFileAttributesW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetVolumeNameForVolumeMountPointA
GetWindowsDirectoryW
InterlockedIncrement
LoadLibraryW
MoveFileWithProgressW
ReadConsoleOutputA
RequestWakeupLatency
SetFilePointerEx
SetMailslotInfo
_lread
lstrlenW
GlobalHandle
GlobalSize
SetUnhandledExceptionFilter
TerminateProcess
CloseHandle
CompareFileTime
CreateDirectoryA
CreateEventA
CreateThread
DosDateTimeToFileTime
ExpandEnvironmentStringsA
FindFirstFileW
FreeLibraryAndExitThread
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesExA
GetLocalTime
GetVersionExA
InterlockedDecrement
IsBadReadPtr
IsBadWritePtr
LoadLibraryExA
ResetEvent
SetEvent
TlsGetValue
TlsSetValue
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
GetTickCount
InterlockedExchange
LocalAlloc
LocalFree
SetVolumeLabelW
Sleep
VirtualFree
InterlockedCompareExchange
ReadConsoleW
AddConsoleAliasA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
DisableThreadLibraryCalls
ExpandEnvironmentStringsW
FreeLibrary
GetFullPathNameA
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
GetCurrentDirectoryA
GetDriveTypeA
GetCPInfo
GetACP
GetOEMCP
GetLastError
HeapCompact
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
GetFileType
CreatePipe
CreateFileA
FindNextFileW
HeapFree
HeapAlloc
MoveFileA
SetFilePointer
UnhandledExceptionFilter
GetCommandLineA
GetVersion
ExitProcess
DeleteCriticalSection
FatalAppExitA
DeleteFileW
GetModuleHandleA
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapReAlloc
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
RtlUnwind
SetHandleCount
GetStdHandle
GetStartupInfoA
SetEndOfFile
ReadFile
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
TlsAlloc
TlsFree
SetLastError
RaiseException
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
GetTimeZoneInformation
FlushFileBuffers
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
oleaut32
DispCallFunc
DosDateTimeToVariantTime
SafeArrayAllocDescriptor
SetErrorInfo
VarI1FromUI1
VarI2FromStr
VarR4FromBool
VarR4FromUI2
VarUI2FromUI4
OleSavePictureFile
VarCyCmpR8
VarBstrFromDate
rpcrt4
NdrComplexArrayMemorySize
NdrFullPointerXlatInit
NdrProxyGetBuffer
NdrAsyncClientCall
NdrClientCall2
NdrCorrelationFree
RpcAsyncCancelCall
RpcAsyncCompleteCall
RpcAsyncInitializeHandle
RpcBindingFree
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoExA
RpcSmDestroyClientContext
RpcSsFree
RpcStringBindingComposeA
RpcStringFreeA
Exports
Exports
Sections
.text Size: 432KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ