Static task
static1
Behavioral task
behavioral1
Sample
d50ba34e16ed6234750a1720b661c19020d0acfbc5cabdb9689b00a934fe62b2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d50ba34e16ed6234750a1720b661c19020d0acfbc5cabdb9689b00a934fe62b2.dll
Resource
win10v2004-20220812-en
General
-
Target
d50ba34e16ed6234750a1720b661c19020d0acfbc5cabdb9689b00a934fe62b2
-
Size
10KB
-
MD5
31af52a3666762fdaab1038c2903a970
-
SHA1
a3474c80d5910e8dc1c571a9ff84a5def574c5c5
-
SHA256
d50ba34e16ed6234750a1720b661c19020d0acfbc5cabdb9689b00a934fe62b2
-
SHA512
c75f29bd57c4d29d8fcbc9c066df2ead758c9595a1581a78c92e0774faed73b814554bbf4075674fbe19553e3bba1bbbedf82884d1aa135b353c2c9f549786b2
-
SSDEEP
96:3rzYSfIwlmpP45VTIfIWJOvym2CsPI8sX5x:ICG4rTIfIWtm29I
Malware Config
Signatures
Files
-
d50ba34e16ed6234750a1720b661c19020d0acfbc5cabdb9689b00a934fe62b2.dll windows x64
c931aae30bce43db062829aea7b11939
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
RtlSetLastWin32Error
NtTerminateProcess
RtlInitUnicodeString
RtlNtStatusToDosError
NtClose
DbgPrint
RtlExpandEnvironmentStrings_U
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ