EnAHookAWindow
Static task
static1
Behavioral task
behavioral1
Sample
ffe98d6c9eca31540679c8513184b69eba4af426e82b3fb5e207aefcbc0c39b4.dll
Resource
win7-20220812-en
General
-
Target
ffe98d6c9eca31540679c8513184b69eba4af426e82b3fb5e207aefcbc0c39b4
-
Size
523KB
-
MD5
807d08a49cd1ebe92941e049d2f9e9e0
-
SHA1
50a4bea26818513a4dbf7811978604619b521513
-
SHA256
ffe98d6c9eca31540679c8513184b69eba4af426e82b3fb5e207aefcbc0c39b4
-
SHA512
218d51597b31eb02eaf163e28daf51b55455ba3181dc1cb9fd3e40e732c81098e0006cbbba1136c320752a4576799bfab6031e5b885362353b389d5222bf98ad
-
SSDEEP
384:3qVNjtU2+3inzCh3h+G/d077jSJABzK/4O5Xoh5zBV/kV/QDtSm7:6VAuqPd0XYJwCo/BV/kpQF
Malware Config
Signatures
Files
-
ffe98d6c9eca31540679c8513184b69eba4af426e82b3fb5e207aefcbc0c39b4.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ