HideNtProcess
Static task
static1
Behavioral task
behavioral1
Sample
e8fa7ef1dcd62eafe7b1d9240ce3bf56b3b58583e7542a27537ca00508ad4884.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8fa7ef1dcd62eafe7b1d9240ce3bf56b3b58583e7542a27537ca00508ad4884.dll
Resource
win10v2004-20220901-en
General
-
Target
e8fa7ef1dcd62eafe7b1d9240ce3bf56b3b58583e7542a27537ca00508ad4884
-
Size
76KB
-
MD5
912d77c02684a02ff8f2ae0d4113348b
-
SHA1
bf19aebf78fd6829b47449fb4de483b0c2032dce
-
SHA256
e8fa7ef1dcd62eafe7b1d9240ce3bf56b3b58583e7542a27537ca00508ad4884
-
SHA512
bcfcdd2ae5b3e37975f5c6c0d37cec123b9ec2805141388db346c1f4913dc3a437049088df697230a8491bb2d0eb2eebbe2b77f3207c2676c9f47bdbdee0405f
-
SSDEEP
768:Ep8N9wjHQrn/UmY7e6+XzJI99J4F6W+7H5FqWAk0E3o4atWT8RcjW/gF+i:EQgAlb9gE6hqG0ZjRcjH+
Malware Config
Signatures
Files
-
e8fa7ef1dcd62eafe7b1d9240ce3bf56b3b58583e7542a27537ca00508ad4884.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE