Overview

overview

10

Static

static

10

1.dll

windows7-x64

1

1.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    1.dll
  • Size 214KB
  • Sample220924-kty3vsahd4
  • SHA256 35ebe162b27cb182ea0321615c812cb5fd94dc1ede6a7e4488ddb53b5609c191
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
zeppelin

Malware Config

Signatures

  • Detects Zeppelin payload 1 IoCs
  • Zeppelin family
    zeppelin

File Explorer

  • 1.dll
    .dll 214KB

1.dll

  • IMPHASH b820c6fb1179becef897177c57ed5c05
  • SHA256 35ebe162b27cb182ea0321615c812cb5fd94dc1ede6a7e4488ddb53b5609c191
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Detects Zeppelin payload

Minor OS version
Major OS version
Entry point
202956
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths