Static task
static1
Behavioral task
behavioral1
Sample
c6173f217c56ead35eff74d9b23e9b1dd5dc05a2f82a8fcfd0d65ede9cf428ce.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c6173f217c56ead35eff74d9b23e9b1dd5dc05a2f82a8fcfd0d65ede9cf428ce.dll
Resource
win10v2004-20220812-en
General
-
Target
c6173f217c56ead35eff74d9b23e9b1dd5dc05a2f82a8fcfd0d65ede9cf428ce
-
Size
684KB
-
MD5
c09f82e0289ae171ae757e9bdd4c6bc7
-
SHA1
f0c990d0d4e9e67aa7391c05da1dd0c1ba9c8bb4
-
SHA256
c6173f217c56ead35eff74d9b23e9b1dd5dc05a2f82a8fcfd0d65ede9cf428ce
-
SHA512
829f1f24c1dada23e14d0f73adf40f6f38bd903de7a433400a7ce757f8405e9f180a98f7ce9c2b3e8edc452b8f64e24700c6491e27a7000f29e6dbc799cef860
-
SSDEEP
12288:tq+5pUH7OL1qGW1c+SGH0tdidu3dKrm3VBb0GxwMFA3iP/V5:tF/TPW1uGUtMutKC3VB0GLFASnV5
Malware Config
Signatures
Files
-
c6173f217c56ead35eff74d9b23e9b1dd5dc05a2f82a8fcfd0d65ede9cf428ce.dll windows x86
6c8408bb5d7d5a5b75b9314f94e68763
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DisableThreadLibraryCalls
Sections
jhctzwal Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mzootqiw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
txqtqjae Size: 656KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bbssniqn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE