Behavioral task
behavioral1
Sample
d720ccbf3ddde25928376f4b441f97a48f9f45c0c64d8aa83907383a683ea36c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d720ccbf3ddde25928376f4b441f97a48f9f45c0c64d8aa83907383a683ea36c.dll
Resource
win10-20220812-en
General
-
Target
d720ccbf3ddde25928376f4b441f97a48f9f45c0c64d8aa83907383a683ea36c
-
Size
136KB
-
MD5
dc414e919853c382fd748a17b1be8943
-
SHA1
a0e8f2971514d0b993d3c71ca4d14464980eec24
-
SHA256
d720ccbf3ddde25928376f4b441f97a48f9f45c0c64d8aa83907383a683ea36c
-
SHA512
9ecdd3ed227a2394f56ccec618bc51e6a2b112727adc8f64d36ffe59cbe903178f8bd91e8f140c9613b4c6094a6b76ae3bfb49c13e188fae272bc042a69bf6c6
-
SSDEEP
3072:xzRnuQpLlU6m277XSk7tkdJ2feIu1WQ2HK1AsTes5x9:x9n7pD3R+gWT1WnE
Malware Config
Signatures
-
Emotet family
Files
-
d720ccbf3ddde25928376f4b441f97a48f9f45c0c64d8aa83907383a683ea36c.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ