Static task
static1
Behavioral task
behavioral1
Sample
472bb67362542f9484950e88be510b82a2ef2e5a1738dbbc6ef63d8ae193470a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
472bb67362542f9484950e88be510b82a2ef2e5a1738dbbc6ef63d8ae193470a.dll
Resource
win10v2004-20220901-en
General
-
Target
472bb67362542f9484950e88be510b82a2ef2e5a1738dbbc6ef63d8ae193470a
-
Size
10KB
-
MD5
7d3391e3c3eb5d86bbbdabf741cfcc20
-
SHA1
562d09786b6f019aca61884c125d638117f7b5ac
-
SHA256
472bb67362542f9484950e88be510b82a2ef2e5a1738dbbc6ef63d8ae193470a
-
SHA512
d104a418e72407b0407306c28d4aa1b18f4cc9cb514ac3cb24923f7bc8e1acb54b44e216bfd44e3305ef9f17f089fcf62ab211050eb6466f24d69403e21c9429
-
SSDEEP
96:3rzYSfIwlmpP45VTIfIWJOvym4kzt/8sX5x:ICG4rTIfIWtm4ql
Malware Config
Signatures
Files
-
472bb67362542f9484950e88be510b82a2ef2e5a1738dbbc6ef63d8ae193470a.dll windows x64
c931aae30bce43db062829aea7b11939
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
RtlSetLastWin32Error
NtTerminateProcess
RtlInitUnicodeString
RtlNtStatusToDosError
NtClose
DbgPrint
RtlExpandEnvironmentStrings_U
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ