Static task
static1
Behavioral task
behavioral1
Sample
0a42c2b4e1d78156da3adb3a7d7fa9b4c976a3beae326466b40535279fb47755_unpacked_loader.dll
Resource
win7-20220812-en
General
-
Target
0a42c2b4e1d78156da3adb3a7d7fa9b4c976a3beae326466b40535279fb47755_unpacked_loader
-
Size
40KB
-
MD5
7768a59f4d2cad05a21e285d5b865baa
-
SHA1
0e5ac71e37f94e6f828d2159644cf267e84a599c
-
SHA256
37c14a3e9ba30dde6aa680cbe7b20ddf423c9c66a9c4d264aca393ed3fd0502b
-
SHA512
6d9faa63897dd49596da6c4fc60e246770cb33e820afd64f898c54d9f038eeb419d766f9331fb3e2bccfc6e556ddd018ce7a03218fb62083a408da31006ed3c6
-
SSDEEP
768:Wboele1W2RAHFIxdUbp1gwT7OkRvpYEPp8hT2dGe0L4NFwU:0Pe1W2RIyUBqkjYEPp8p21U4NFwU
Malware Config
Signatures
Files
-
0a42c2b4e1d78156da3adb3a7d7fa9b4c976a3beae326466b40535279fb47755_unpacked_loader.dll windows x86
0dac095716581c02a0ab68fef3dc203a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
qsort
bsearch
kernel32
VirtualFree
IsBadReadPtr
LoadLibraryW
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
VirtualAlloc
VirtualProtect
VirtualQuery
FreeLibrary
GetProcAddress
LoadLibraryA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 466B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ