_DllMain@12
Static task
static1
Behavioral task
behavioral1
Sample
ebd35e094110cd1849961296aaa497ef815af43c1fed65a2da63dbeec70ecb00.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ebd35e094110cd1849961296aaa497ef815af43c1fed65a2da63dbeec70ecb00.dll
Resource
win10v2004-20220812-en
General
-
Target
ebd35e094110cd1849961296aaa497ef815af43c1fed65a2da63dbeec70ecb00
-
Size
92KB
-
MD5
c9414b2eb0943d71accc2feedb5765fa
-
SHA1
ac15d8eb81fc939907ef2e4c7c0e6650fe2082f4
-
SHA256
ebd35e094110cd1849961296aaa497ef815af43c1fed65a2da63dbeec70ecb00
-
SHA512
3026dc6aa8b3e7032180d25aff438968bf1336f5b3b120ced7453cfd4b868917ee0e8e04319b72e0a3c951cb29c3e090ec34bac253adcffe3d36098af6514271
-
SSDEEP
1536:j63zt54Oaie9MKqYhFsQbCDcAemNkLzWEhWIMezvtfzh9vLaqG:2jev93qYoRDl0zph/BzvtzQ
Malware Config
Signatures
Files
-
ebd35e094110cd1849961296aaa497ef815af43c1fed65a2da63dbeec70ecb00.dll windows x86
8318981b855a077a452f07fdd8d83ab6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
msvcrt
ftell
kernel32
GetLastError
LoadLibraryA
VirtualProtect
GetModuleFileNameA
user32
CharUpperA
MessageBoxA
advapi32
QueryServiceConfigA
shell32
SHGetSpecialFolderPathA
ole32
CoCreateGuid
Exports
Exports
Sections
.text Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bad0 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bad1 Size: - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.bad2 Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ