Static task
static1
Behavioral task
behavioral1
Sample
e609894b274a6c42e971e8082af8fd167ade4aef5d1a3816d5acea04839f0b35.dll
Resource
win7-20220901-en
General
-
Target
8989526139.zip
-
Size
407KB
-
MD5
1a99a98597282864905a8a53819f30c1
-
SHA1
d6ac29bffbb183e66c54d8994c526d0c8ed804ae
-
SHA256
17ab3a222ed0f41e60d456e201450b36b28c27b9945880fb40b082a6171c79e2
-
SHA512
07a9377d37a4938f0f6c9fefe9e84a7796733fe7d262cdefa7b6be55b76a5f90acbc7795aeb5e369fb969103871780eef29fad0b5cc4fb83bfcce424f14e2752
-
SSDEEP
6144:nP1OAfQixoenUY650N59bC0UTOinOf68DJgQ+RBk1y9rr4LIAC9EjKBP1/gKvU6K:nNO/er6458/nOf60gB+tIA4W8U6IG9W
Malware Config
Signatures
Files
-
8989526139.zip.zip
Password: infected
-
e609894b274a6c42e971e8082af8fd167ade4aef5d1a3816d5acea04839f0b35.dll windows x86
78b4b07ec49eab1076c53a1a1cf86078
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObjectEx
GetBinaryTypeW
GetModuleFileNameW
CloseHandle
GetCurrentThreadId
oleaut32
GetRecordInfoFromGuids
powrprof
ReadPwrScheme
user32
UpdateWindow
SystemParametersInfoW
ChangeDisplaySettingsW
setupapi
SetupPromptForDiskW
gdi32
SetMapperFlags
msvcrt
memset
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 476KB - Virtual size: 473KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ