SfcGetFiles
Static task
static1
Behavioral task
behavioral1
Sample
e35ba5ff8046a6ae2e8d5c40ed90453f5404ef17f8c627a06635265244e622ab.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e35ba5ff8046a6ae2e8d5c40ed90453f5404ef17f8c627a06635265244e622ab.dll
Resource
win10v2004-20220812-en
General
-
Target
e35ba5ff8046a6ae2e8d5c40ed90453f5404ef17f8c627a06635265244e622ab
-
Size
1.5MB
-
MD5
5386f2d512c877c738540cc334699567
-
SHA1
15f1f68f096da00960a70eb31d81c19ec08bfdb5
-
SHA256
e35ba5ff8046a6ae2e8d5c40ed90453f5404ef17f8c627a06635265244e622ab
-
SHA512
16a45b14ef348d12623cebd69d99f40d97b61e35269bb6ef5bc2889b320a0ef5cbf345036e838e629c7328dd5108f674446902d151779fa1544cc11f1daf3de7
-
SSDEEP
3072:xIgtDGtg9mo8gaaP3ZoDRKCaaokR2zojjHLyORm+WVW9OmJIWFN:bt6t+baEoFjryD0J
Malware Config
Signatures
Files
-
e35ba5ff8046a6ae2e8d5c40ed90453f5404ef17f8c627a06635265244e622ab.dll windows x86
ae9cc7d53b6a44aaf649c33c47aa3770
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetLastError
GetModuleFileNameA
GetTickCount
GlobalAlloc
GlobalFree
InitializeCriticalSection
LoadLibraryA
Sleep
WaitForSingleObject
FreeLibrary
FindFirstFileA
ExitProcess
EnterCriticalSection
DeleteFileA
CreateThread
CreateFileMappingA
CreateFileA
CompareStringA
LeaveCriticalSection
CloseHandle
advapi32
RegSetValueA
RegQueryValueExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
user32
BeginPaint
CallWindowProcA
CascadeWindows
CharNextW
CharUpperBuffA
CheckDlgButton
ClientToScreen
CopyRect
CreatePopupMenu
MessageBoxA
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 925B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ