Static task
static1
Behavioral task
behavioral1
Sample
e600d4e3eda2f1209c970290c4575cd5b2f7edf85d52b52870528167e9c8faa0.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e600d4e3eda2f1209c970290c4575cd5b2f7edf85d52b52870528167e9c8faa0.dll
Resource
win10v2004-20221111-en
General
-
Target
e600d4e3eda2f1209c970290c4575cd5b2f7edf85d52b52870528167e9c8faa0
-
Size
98KB
-
MD5
762152cab6fbf7b047a4333584fb701b
-
SHA1
2d560e79dc2af33dd1cbfe6e394503d5ddf748c8
-
SHA256
e600d4e3eda2f1209c970290c4575cd5b2f7edf85d52b52870528167e9c8faa0
-
SHA512
c99bf4bbcf32b2eab25d0b5873546902032bff43bc6a28e520383d3757f3d204c82e40eea9baf8a3354fc130c88c4847c55ff544f8434283736d85f882c8ea23
-
SSDEEP
1536:19yT9Sy/RGunQG7ivhMKxYDQqLcD6NpDkK1ATg5bM7o3+6wtIuQHVhG7pvWqcN:1i9Syft7iviKxZ6NpDT1bQ6DjSwj
Malware Config
Signatures
Files
-
e600d4e3eda2f1209c970290c4575cd5b2f7edf85d52b52870528167e9c8faa0.dll windows x86
23c313944a68b1a718fa542db1fa52ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ConvertDefaultLocale
CreateFileMappingA
EndUpdateResourceA
GetCommandLineA
GetEnvironmentStringsW
GetFileTime
GetTimeFormatA
GetVersionExA
HeapAlloc
HeapCreate
LCMapStringA
LocalAlloc
ReleaseMutex
SetFileAttributesA
user32
ClientToScreen
CreateDialogIndirectParamA
DefWindowProcA
DrawTextA
DrawTextExA
GetActiveWindow
GetClassInfoA
GetClassLongA
GetDesktopWindow
GetMessageA
GetNextDlgGroupItem
GetParent
GetSubMenu
GetWindowPlacement
OffsetRect
PostQuitMessage
SetDlgItemTextA
SetFocus
SetWindowsHookExA
ShowWindow
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ