Start
Static task
static1
Behavioral task
behavioral1
Sample
eb06569d4a9adf6b193c02f48ce56c4e5890bf70e76e92a8cc2340f0c4e057ae.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb06569d4a9adf6b193c02f48ce56c4e5890bf70e76e92a8cc2340f0c4e057ae.dll
Resource
win10v2004-20221111-en
General
-
Target
eb06569d4a9adf6b193c02f48ce56c4e5890bf70e76e92a8cc2340f0c4e057ae
-
Size
41KB
-
MD5
be6197c681a1a393ed38ff8fce18a079
-
SHA1
71aedaca73cbb262771876ed33ad254d8b429498
-
SHA256
eb06569d4a9adf6b193c02f48ce56c4e5890bf70e76e92a8cc2340f0c4e057ae
-
SHA512
17ba480977351c911b82a3e687c47fb390b1382b47f8f76764347c23d16c1b7ab168d7bb36e8ce29470300e15b392116dec51f67b9f9e338e7e37623d05bcc40
-
SSDEEP
768:N+rEA8Sch2F90EETlNESnnTPrsmGI5THY00D+Y8lhXYpDf0aK:NIEsch2F90EE3n7zJsH8lVYmaK
Malware Config
Signatures
Files
-
eb06569d4a9adf6b193c02f48ce56c4e5890bf70e76e92a8cc2340f0c4e057ae.dll windows x86
c06fb5e3b69d2fb076f6c7afef1d0ed6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
ExitProcess
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
LockResource
GetModuleFileNameA
FindResourceA
SizeofResource
LoadResource
GlobalAlloc
GetProcAddress
user32
DefWindowProcA
PostQuitMessage
LoadIconA
LoadCursorA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassA
gdi32
GetStockObject
advapi32
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
msvcrt
_initterm
free
realloc
strstr
sprintf
_strlwr
malloc
_adjust_fdiv
_stricmp
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ