OpenAdapter
Static task
static1
Behavioral task
behavioral1
Sample
e398755617e8a74e0bf91757d691c8aea826a585cd6eea0da2d6e3a3d9859fb6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e398755617e8a74e0bf91757d691c8aea826a585cd6eea0da2d6e3a3d9859fb6.dll
Resource
win10v2004-20221111-en
General
-
Target
e398755617e8a74e0bf91757d691c8aea826a585cd6eea0da2d6e3a3d9859fb6
-
Size
629KB
-
MD5
5c4708c5663f48023add1c88db83ebe6
-
SHA1
53f07e0f5374198019cf45142da6ff2768103a50
-
SHA256
e398755617e8a74e0bf91757d691c8aea826a585cd6eea0da2d6e3a3d9859fb6
-
SHA512
02cc6c31bfee2335249d1280461fe94bc81c8f4ffda8a304ecff9fab2c05d025fcde6819f938d2f8233886a3c6a2f119b88715996bfc8aac227034a0b9246088
-
SSDEEP
12288:rBMhr7P8bCv12vfTYdkaUP9yay8pyWbjtgMSpr3JymqmJiAPA5:ih/P8bCenSkygtXS7fER
Malware Config
Signatures
Files
-
e398755617e8a74e0bf91757d691c8aea826a585cd6eea0da2d6e3a3d9859fb6.dll windows x86
729177d3d10a921d541382d24a4b116b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceEvent
UnregisterTraceGuids
RegisterTraceGuidsA
kernel32
GetLastError
GetLogicalProcessorInformation
GetCurrentProcessId
GetSystemPowerStatus
LocalFree
GetModuleFileNameA
CreateFileA
CloseHandle
QueryFullProcessImageNameA
GetCurrentProcess
WaitForMultipleObjects
SetEvent
VirtualFree
LoadLibraryA
WaitForSingleObject
CreateThread
CreateEventA
VirtualAlloc
GetSystemInfo
VirtualProtect
MultiByteToWideChar
DeleteFileW
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
GetModuleHandleA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileW
OutputDebugStringA
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CompareStringW
CompareStringA
GetProcAddress
FreeLibrary
Sleep
HeapFree
HeapAlloc
RtlUnwind
GetLocalTime
GetCommandLineA
GetVersionExA
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapDestroy
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
InitializeCriticalSection
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryExA
SetFilePointer
GetConsoleCP
GetConsoleMode
VirtualQuery
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetEnvironmentVariableA
user32
EnumDisplayDevicesA
gdi32
DeleteDC
CreateDCA
Exports
Exports
Sections
.text Size: 470KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ