Static task
static1
Behavioral task
behavioral1
Sample
e4a04cbe33cf38ed10b2cbbe5d274690af8e0debd2a563f6d86037b704ad1956.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4a04cbe33cf38ed10b2cbbe5d274690af8e0debd2a563f6d86037b704ad1956.dll
Resource
win10v2004-20220901-en
General
-
Target
e4a04cbe33cf38ed10b2cbbe5d274690af8e0debd2a563f6d86037b704ad1956
-
Size
359KB
-
MD5
5ebfc49c9d66c0dbe94af45785622018
-
SHA1
59ac75913fc15fac699e6800a80946ab5fadac3d
-
SHA256
e4a04cbe33cf38ed10b2cbbe5d274690af8e0debd2a563f6d86037b704ad1956
-
SHA512
ec06069dd7283026c5ba86b177d1a93c9094f0feba3c8a213dda3f4e3d1ef03ab6cf2d60d5dda524f82e8b1f82203e0b82b2af65498e59a4ce50a005232a59be
-
SSDEEP
6144:IjXvWZRyEzoe/iVUY24dHnfQeeaQeeZQeesQeeG0QeehQeehoCjVETA0OtGM7sP4:IjXvWZcUbiVUYlwCEAQbCzVLNMQ
Malware Config
Signatures
Files
-
e4a04cbe33cf38ed10b2cbbe5d274690af8e0debd2a563f6d86037b704ad1956.dll windows x86
981d63fb8d43041db1938b9ae7521887
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
GetTimeFormatA
VirtualProtectEx
GetSystemInfo
GetVolumeInformationA
GetComputerNameA
GetProcAddress
IsBadReadPtr
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
WritePrivateProfileStringA
InterlockedCompareExchange
InterlockedExchange
OutputDebugStringA
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
IsProcessorFeaturePresent
CreateThread
GetModuleFileNameA
VirtualProtect
GetModuleHandleA
GetVersionExA
Sleep
user32
GetAsyncKeyState
wsprintfA
GetCursorPos
advapi32
CryptGetHashParam
CryptCreateHash
CryptHashData
RegCloseKey
RegQueryValueExA
RegOpenKeyA
CryptAcquireContextA
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??Bios_base@std@@QBEPAXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?eof@ios_base@std@@QBE_NXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
wininet
InternetReadFile
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
msvcr90
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
rand
strtol
free
_vsnprintf
sprintf
iswspace
iswalpha
iswdigit
iswpunct
__CxxFrameHandler
strncpy
_ftol
_finite
_CIacos
clock
??2@YAPAXI@Z
_time64
??3@YAXPAX@Z
srand
??_V@YAXPAX@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_encode_pointer
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
memset
_CIsqrt
_CIatan2
_CxxThrowException
iphlpapi
GetAdaptersInfo
gdi32
GetTextMetricsA
GetGlyphOutlineA
CreateDIBSection
DeleteDC
DeleteObject
GetObjectW
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
GetObjectA
ExtTextOutW
SelectObject
MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
SetTextAlign
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.v-lizer Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE