Static task
static1
Behavioral task
behavioral1
Sample
e26b61f2e1f236247e2dcf7fc525fae09ab9116aafc15e4e9e02e219d0537683.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e26b61f2e1f236247e2dcf7fc525fae09ab9116aafc15e4e9e02e219d0537683.dll
Resource
win10v2004-20220812-en
General
-
Target
e26b61f2e1f236247e2dcf7fc525fae09ab9116aafc15e4e9e02e219d0537683
-
Size
48KB
-
MD5
0a5e599a23c19007cf3c2b63dd90c3f9
-
SHA1
b5593785e881e8b9d9e02dfe696969cc35f9fd62
-
SHA256
e26b61f2e1f236247e2dcf7fc525fae09ab9116aafc15e4e9e02e219d0537683
-
SHA512
9a93f86cd929b3aaf20c73d2c94c4b8b8311f2f4bf5a39ce11ac136379d9bbb464f50113a474f6c4231f7d2b39755cd2b8a6bdad770659666a57d3f40a0aea27
-
SSDEEP
768:hYrYZPU/KgL6PXMSg9w/GuJ8aoBuwsh/G47xCN:Ls/jL6PXhSUoBuwkV7xC
Malware Config
Signatures
Files
-
e26b61f2e1f236247e2dcf7fc525fae09ab9116aafc15e4e9e02e219d0537683.dll windows x86
361f7eaba33f73d14391191507c2ce2a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE