Static task
static1
Behavioral task
behavioral1
Sample
e70f7234ed9181828b29f6066842aa9da7a0bb23074184a9d0ecb9fde44fce7e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e70f7234ed9181828b29f6066842aa9da7a0bb23074184a9d0ecb9fde44fce7e.dll
Resource
win10v2004-20221111-en
General
-
Target
e70f7234ed9181828b29f6066842aa9da7a0bb23074184a9d0ecb9fde44fce7e
-
Size
143KB
-
MD5
c29675c21e52f2b0165114b628cd3070
-
SHA1
6a14050f5a08ffd032ca3c8f92c1e7ed5952fe79
-
SHA256
e70f7234ed9181828b29f6066842aa9da7a0bb23074184a9d0ecb9fde44fce7e
-
SHA512
b4cf2654e151870fc2dd465ada67d7b54707f1ef2c6865c2364db6f6108e60e8944c0219faf3f607605de0299f7f72ca3338981f5b48767a953f289d5167eafe
-
SSDEEP
1536:EScPO3N0Zdlppph+AHTUiCgzw3BWtvbC2XGrR56pFm78k66EC4VnMkbO+sc8bCXp:ElO90Zdbp3+lidG22igpHg2c8uXsAV
Malware Config
Signatures
Files
-
e70f7234ed9181828b29f6066842aa9da7a0bb23074184a9d0ecb9fde44fce7e.dll windows x86
3603c9454bdd3148e1b3d3d6f8718d3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
atoi
strstr
kernel32
ReadFile
lstrcatA
lstrcmpiA
GetTempPathA
DeleteFileA
GetFileSize
GetWindowsDirectoryA
WriteFile
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalFree
LoadLibraryExA
GetModuleFileNameA
LocalFree
CreateFileA
CreateThread
lstrcpyA
advapi32
RegCloseKey
BuildExplicitAccessWithNameA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
SetEntriesInAclA
OpenSCManagerA
SetNamedSecurityInfoA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ