Static task
static1
Behavioral task
behavioral1
Sample
Extensions.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Extensions.dll
Resource
win10-20220812-en
General
-
Target
Extensions.dll
-
Size
52KB
-
MD5
a09a911a0bb941d7a9afd1a3287fe9ce
-
SHA1
0e356394f8f447db8d98e5e1785b4d73c9857951
-
SHA256
c582725ba3183a2121d60b0ece58074bf6ec8e1681a5e5b86077aecdae6003fc
-
SHA512
7bf365c85a9e9dd42992329b53c8c9a346f943834958e71430bb84c0b3a3046ef0b9cc59c2b87eb57985909a0fbb18f12c7fe1bffc8c4b4615723f2148fac951
-
SSDEEP
1536:zUKa1auVHb46xnATvrS2qu29Uv8pXm0l:z9a1F6TvrS2qu2w8pp
Malware Config
Signatures
Files
-
Extensions.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ