Static task
static1
Behavioral task
behavioral1
Sample
6a63e4d5864ac984259adb396ca5defaf6d89de16ed8fde4f69868c04dd1d728.dll
Resource
win7-20220901-en
General
-
Target
6a63e4d5864ac984259adb396ca5defaf6d89de16ed8fde4f69868c04dd1d728
-
Size
65KB
-
MD5
902ae1896177c1644298daf4678eb690
-
SHA1
df6a82c6a28792d487a72e39f3f1d5c14ef7601c
-
SHA256
6a63e4d5864ac984259adb396ca5defaf6d89de16ed8fde4f69868c04dd1d728
-
SHA512
b43197e9b012104989e3e809efa143a4423b9697a51584ab3dedcbe24da32a7dadca0b018eab26366c442b95ebe2948ade4e632230a0f0c31d578579264bf5ab
-
SSDEEP
1536:kMT4R27g9fGVwx1q3TkhOg5gfzd3JMLDvRieBL8mI64Ynh1:kQ4Ug9foY2bd3e/Ris8A7
Malware Config
Signatures
Files
-
6a63e4d5864ac984259adb396ca5defaf6d89de16ed8fde4f69868c04dd1d728.dll windows x86
c2c088f47dfc3a3cc149e3a5ada1a993
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetAsyncKeyState
shell32
ShellExecuteA
msvcr100
?terminate@@YAXXZ
Sections
.text Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE