0ff8a1a7a001ff4f43c7b718bfcd451ecb71017f5b3d70080e750a84330c18aa | Triage

Submit
Reports

Overview

overview

1

Static

static

0ff8a1a7a0...aa.dll

windows7-x64

1

0ff8a1a7a0...aa.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

0ff8a1a7a001ff4f43c7b718bfcd451ecb71017f5b3d70080e750a84330c18aa.dll

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

0ff8a1a7a001ff4f43c7b718bfcd451ecb71017f5b3d70080e750a84330c18aa.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

General

Target

0ff8a1a7a001ff4f43c7b718bfcd451ecb71017f5b3d70080e750a84330c18aa
Size

293KB
MD5

000002c851fce4acbf310f4ae5ad6fb0
SHA1

688e4ebcf5b95f9bea9180c404765af5dc862585
SHA256

0ff8a1a7a001ff4f43c7b718bfcd451ecb71017f5b3d70080e750a84330c18aa
SHA512

0e7531bc0602890705b058785921455fceba8d8076caf091246e9005879cda030fcfff2f438b6bfee4b6ed899584b97d18985641bb3605ecf0b0a4e566d6e8be
SSDEEP

6144:m1Grg9nTDy9goN+QUH4c6OseQm2x5cc3rlN8spzzWRCRQFmSYml:CGrk/gMQUYctxQm2xFDpziRC

Score

N/A

Malware Config

Signatures

Files

0ff8a1a7a001ff4f43c7b718bfcd451ecb71017f5b3d70080e750a84330c18aa
.dll windows x86

4545fa765752ccb6c134569786978532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
IsDBCSLeadByte
IsDBCSLeadByteEx
GetSystemDefaultLangID
GetModuleFileNameA

user32

GetWindowRect
GetClipCursor
AdjustWindowRect

authz

AuthzCachedAccessCheck
AuthzInitializeResourceManager
AuthzFreeContext
AuthzFreeHandle
AuthzInitializeContextFromAuthzContext
AuthzOpenObjectAudit
AuthziLogAuditEvent
AuthzInitializeContextFromToken
AuthzInitializeContextFromSid
AuthzGetInformationFromContext
AuthzFreeAuditEvent
AuthzFreeResourceManager
AuthzInitializeObjectAccessAuditEvent

Exports

Exports

ACMEInfoQueuingInitialization
AInfoInstall
ActionWhetherNotOSOpened
ActionX
AnInfo
BeInfoComponentIdOf
BeTheOCM
BelongsXCould
ClusterOpenedInstalled
DToAction
InFor
InstallingGUI
MSMQOfBeForQueuing
NotNot
OperationFlagsInInstalledTheKey
RegistryIs
SourcePathIsInfoInfoThe
SubcomponentsInfoInstalledIsThe
TheMessageNot
WasNot

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 170KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy