Static task
static1
Behavioral task
behavioral1
Sample
e81b3cef5159c192ccbc9c07adc40959cdc8d28c7329f71a53df6a41447e9405.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e81b3cef5159c192ccbc9c07adc40959cdc8d28c7329f71a53df6a41447e9405.dll
Resource
win10v2004-20220901-en
General
-
Target
e81b3cef5159c192ccbc9c07adc40959cdc8d28c7329f71a53df6a41447e9405
-
Size
267KB
-
MD5
8b728dc9a7264853cb5d86641166c916
-
SHA1
47c2f5b4a95c19fcba6daea6702642c91656d39b
-
SHA256
e81b3cef5159c192ccbc9c07adc40959cdc8d28c7329f71a53df6a41447e9405
-
SHA512
320e1a97596ba79b80562388ddd5c331cdf9be6b23cb44237f8daba400c4ce96d8be1d9d9cae1c9fec38b255a861d464fb8f25a5e7ce72d3cf627e970d87fc7d
-
SSDEEP
6144:d9MIH6HyrdN643Nui+rUz1NSh/904EDX1uFh0Y3UJSk7hRPLz3:d9ZN649+QzgGrX13oUFJL
Malware Config
Signatures
Files
-
e81b3cef5159c192ccbc9c07adc40959cdc8d28c7329f71a53df6a41447e9405.dll windows x86
691909ae0b89de439accd06969ba5521
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetFullPathNameA
GetFullPathNameW
EnumDateFormatsA
IsDBCSLeadByte
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
InterlockedExchange
GetDiskFreeSpaceExA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateSemaphoreA
ReleaseSemaphore
ExitThread
WritePrivateProfileStringA
GetPrivateProfileStringA
FileTimeToLocalFileTime
lstrcmpA
lstrcmpW
GlobalFree
GlobalUnlock
GlobalAlloc
GetACP
GetTempFileNameA
oleaut32
SafeArrayDestroyDescriptor
SafeArrayCreateEx
OleTranslateColor
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen
msvfw32
ICInfo
Sections
.text Size: 170KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ