DllCanUnloadNow
Static task
static1
Behavioral task
behavioral1
Sample
ca30527ff8dab29d798071a1b5e6f91db77f0a45dc61d85f9fbf370674938f14.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca30527ff8dab29d798071a1b5e6f91db77f0a45dc61d85f9fbf370674938f14.dll
Resource
win10v2004-20220812-en
General
-
Target
ca30527ff8dab29d798071a1b5e6f91db77f0a45dc61d85f9fbf370674938f14
-
Size
13KB
-
MD5
4077927b6cf7a53e0cc46164508d1be6
-
SHA1
4d3bfde670abc5fedaa24d9192c54a3daf33c6f5
-
SHA256
ca30527ff8dab29d798071a1b5e6f91db77f0a45dc61d85f9fbf370674938f14
-
SHA512
f8e2168ba7fb7a83d94358d4f6e9cc9286cb0b63b4703e5f0c14b0a14d01837808ab698947e7446d7a848e5102195857d96dc9cfbfb529ce4c9cf72617dccebf
-
SSDEEP
192:fRs+V1dsekFW+aDmaGUuUnGp30ZFAqxnLrxhbH/:qWcVfaDg5p3EFAwVhbH/
Malware Config
Signatures
Files
-
ca30527ff8dab29d798071a1b5e6f91db77f0a45dc61d85f9fbf370674938f14.dll windows x86
2d8a447eef7c1768d81bbd612d9787b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
WriteProcessMemory
lstrlenA
GetProcAddress
LoadLibraryA
FlushInstructionCache
VirtualAlloc
ReadProcessMemory
VirtualProtect
IsBadCodePtr
GetCurrentProcess
CloseHandle
ReadFile
GetFileSize
CreateFileA
HeapFree
HeapCreate
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 586B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 474B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ