Behavioral task
behavioral1
Sample
672d153c19b525e37928f00d2a640a5f30866987df920f8938dfe6a69d9cb885.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
672d153c19b525e37928f00d2a640a5f30866987df920f8938dfe6a69d9cb885.dll
Resource
win10v2004-20220812-en
Errors
General
-
Target
672d153c19b525e37928f00d2a640a5f30866987df920f8938dfe6a69d9cb885
-
Size
222.6MB
-
MD5
f36df098c2a4932d2817e4189bb0c877
-
SHA1
81864f6b4ada40ba48ee11d0a4de47838f9bf699
-
SHA256
672d153c19b525e37928f00d2a640a5f30866987df920f8938dfe6a69d9cb885
-
SHA512
4bc93c8a26dcf8d7bf2bde1d503f1afa9f1e34f608f38dd4348883ab64e8c1f70e17db509ec794efe7717aad921249b304192f0d495728a524ff3d69655e27dc
-
SSDEEP
1572864:CPYK7/E81LHbUi4kVdc3VBlFiayH6zm5T:vm/E81M+Xc3pe6zm5
Malware Config
Signatures
-
resource yara_rule sample m00nd3v_logger -
M00nd3v_logger family
Files
-
672d153c19b525e37928f00d2a640a5f30866987df920f8938dfe6a69d9cb885.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 182.8MB - Virtual size: 182.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29.8MB - Virtual size: 29.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxfg Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retplne Size: 512B - Virtual size: 232B
.rodata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 729B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voltbl Size: 512B - Virtual size: 116B
CPADinfo Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
malloc_h Size: 512B - Virtual size: 225B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ