FindProc
Static task
static1
Behavioral task
behavioral1
Sample
306016987ed040265ef5c08145596b3fe11e2a7fc13ed03444a098789fee42fe.dll
Resource
win7-20220812-en
General
-
Target
306016987ed040265ef5c08145596b3fe11e2a7fc13ed03444a098789fee42fe
-
Size
60KB
-
MD5
0ecf61b1f6e79c236c11c2d17252abc0
-
SHA1
00a508b18f3e9cc5f962cf35e909b616f25409c6
-
SHA256
306016987ed040265ef5c08145596b3fe11e2a7fc13ed03444a098789fee42fe
-
SHA512
be71f374bd0fba26b27f0f678d04b6811a473f87b50471b3c1a4f0725195d157700276b9e254610a90885e6ba0b1ba0fe73a31f797f0f3b3280d6d34dc40d963
-
SSDEEP
1536:7V0ZGD8J5JFAkQCTi0+7BzZqR6RE+GktDdA:i8ywCT2BzcR0/Gk
Malware Config
Signatures
Files
-
306016987ed040265ef5c08145596b3fe11e2a7fc13ed03444a098789fee42fe.dll windows x86
8df26927f8978d4eb40ff179c0aa961b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
lstrcmpA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
FreeLibrary
GetVersionExA
lstrlenA
GlobalFree
user32
wsprintfA
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE