Static task
static1
Behavioral task
behavioral1
Sample
eae920e4f6e0c6a50fd4b3fe7b0bf8437fa56cdf98cedafec51e81c78ffeb927.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eae920e4f6e0c6a50fd4b3fe7b0bf8437fa56cdf98cedafec51e81c78ffeb927.dll
Resource
win10v2004-20221111-en
General
-
Target
eae920e4f6e0c6a50fd4b3fe7b0bf8437fa56cdf98cedafec51e81c78ffeb927
-
Size
444KB
-
MD5
a81a3eeb37afd061e3d69ca5836aa2fd
-
SHA1
feb30d01edf447c2fc282984b259366f5d7eab55
-
SHA256
eae920e4f6e0c6a50fd4b3fe7b0bf8437fa56cdf98cedafec51e81c78ffeb927
-
SHA512
e3568c91cf8b961331721879d68ba2f6a850dea8435d823c036f1661a2a3db0bae6e7cb1a5b63aa2e03bc1d5e74c0996ee2669e41dadaa88d7b24f2569bcdd81
-
SSDEEP
6144:1r5s5usc47BV2zUarncqMU9UHwlUOhPR7:1luU41Vbarn10BO1R7
Malware Config
Signatures
Files
-
eae920e4f6e0c6a50fd4b3fe7b0bf8437fa56cdf98cedafec51e81c78ffeb927.dll windows x86
84ceb30da17b0cebf228f2a55559a78a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconA
SHGetFolderPathA
kernel32
lstrlenA
LocalAlloc
GetACP
LoadLibraryExA
GetProcAddress
GetModuleHandleA
VirtualAlloc
ExitProcess
GetCommandLineA
GetCommandLineW
IsBadReadPtr
GetOEMCP
ExitThread
msvcrt
srand
strlen
cos
pow
Sections
.text Size: 276KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ