MountainSnapshot
Static task
static1
Behavioral task
behavioral1
Sample
385e77f0a65eb0288a4eb990beeffc03e352169d6ad05cb4857ce6c1d725114a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
385e77f0a65eb0288a4eb990beeffc03e352169d6ad05cb4857ce6c1d725114a.dll
Resource
win10v2004-20220901-en
General
-
Target
385e77f0a65eb0288a4eb990beeffc03e352169d6ad05cb4857ce6c1d725114a
-
Size
160KB
-
MD5
4852669e390d190d08836a76c7a13940
-
SHA1
ef28536295121743d79a747a6fed0a68d4a7add8
-
SHA256
385e77f0a65eb0288a4eb990beeffc03e352169d6ad05cb4857ce6c1d725114a
-
SHA512
ed3122fe5a2da73b2ffed04f254e0578a68ef987d019fd3a520ec0c993616f5fc53018b732a4270bcb3588faa193eff206626a3ac68c2236a9218d0531fff329
-
SSDEEP
1536:ANEwWzEpzxMvISxsuKs5IG5O0VaqXc3RNZUaUiexNHrjQlQ8ch:93OtjSvKs5HPXSUB9xNTPh
Malware Config
Signatures
Files
-
385e77f0a65eb0288a4eb990beeffc03e352169d6ad05cb4857ce6c1d725114a.dll windows x86
446e6dc2bfbafbd3bb950b2d51b2ecaf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutGetVolume
kernel32
LocalAlloc
TlsFree
TlsFree
TlsAlloc
TlsGetValue
LocalFree
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ