Static task
static1
Behavioral task
behavioral1
Sample
Sneaky.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Sneaky.dll
Resource
win10v2004-20220812-en
General
-
Target
Sneaky.dll
-
Size
167KB
-
MD5
4859c09e16543504b1bed0c6c0f44dd4
-
SHA1
0f41055c821a518c9964e4e9ce2156821ed74216
-
SHA256
a26d870e1e5afce73df367f469d5b95f3ca42a17f4a9809edb3d817cdc3e1ea0
-
SHA512
2442a4d53389a14020745853894abb86fa6b1ab2459c362e2d56289863ed1197cd91c674cf486fddeb9b508d4ccafcad1043321f8c927a9be96d9112d2459daa
-
SSDEEP
3072:n1jrQKeL7Ivg80iV+qNlLAWx0xp3tWTYXXAyCsJpQQE6dESz:Fr2L7Iv3fV+qN9iDQUXQEJpDE6dj
Malware Config
Signatures
Files
-
Sneaky.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ