Static task
static1
Behavioral task
behavioral1
Sample
ad319f1fab63b5226988d39af05aac4dab36b38f36f2e6c3874b303648d9994a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad319f1fab63b5226988d39af05aac4dab36b38f36f2e6c3874b303648d9994a.dll
Resource
win10v2004-20220812-en
General
-
Target
ad319f1fab63b5226988d39af05aac4dab36b38f36f2e6c3874b303648d9994a
-
Size
10KB
-
MD5
92d344ea7ea46bd54a28573e53328a10
-
SHA1
8fc256ec549897d7ed392640e34b7786daa5e06d
-
SHA256
ad319f1fab63b5226988d39af05aac4dab36b38f36f2e6c3874b303648d9994a
-
SHA512
4b7e94f74ea87e0863ecd6bacd72251c273e71ff71f20bddc2effb194440df092e49b7b6061a88e5b8792723cc0af0ca4a185c007c2a53962ba528345b1bd4df
-
SSDEEP
96:3rzYSfIwlmpP45VTIfIWJOvymA58sX5x:ICG4rTIfIWtmAF
Malware Config
Signatures
Files
-
ad319f1fab63b5226988d39af05aac4dab36b38f36f2e6c3874b303648d9994a.dll windows x64
c931aae30bce43db062829aea7b11939
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
RtlSetLastWin32Error
NtTerminateProcess
RtlInitUnicodeString
RtlNtStatusToDosError
NtClose
DbgPrint
RtlExpandEnvironmentStrings_U
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ