DllCanUnloadNow
Static task
static1
Behavioral task
behavioral1
Sample
4ea8d21fe3ebbba9712748eefae4a8b8f48abce9aa268c6ebf937f0b0002eb49.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ea8d21fe3ebbba9712748eefae4a8b8f48abce9aa268c6ebf937f0b0002eb49.dll
Resource
win10v2004-20220901-en
General
-
Target
4ea8d21fe3ebbba9712748eefae4a8b8f48abce9aa268c6ebf937f0b0002eb49
-
Size
12KB
-
MD5
31bd9859abaf2e8c5b9cc8cc8fc5bc80
-
SHA1
d11ec2f4b3f1614fb57e7999d1a32a680780db02
-
SHA256
4ea8d21fe3ebbba9712748eefae4a8b8f48abce9aa268c6ebf937f0b0002eb49
-
SHA512
6cf7ac457b15021732f0086936b9587955f709c77abb115953bad3b42d86d60a97dcd580fc39148e9589476f5184681c1b9630fd32c0d40e1cecca11149419eb
-
SSDEEP
384:2gIj5L8klgCakwLG9AqlP+ovl/J9DjJRgPZ:Ij5zzqLG9/XvVRRg
Malware Config
Signatures
Files
-
4ea8d21fe3ebbba9712748eefae4a8b8f48abce9aa268c6ebf937f0b0002eb49.dll windows x86
f6962724078b5a400f2fa7bcdee75b1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
HeapAlloc
GetFileSize
CreateFileA
FlushInstructionCache
WriteProcessMemory
VirtualAlloc
ReadProcessMemory
VirtualProtect
IsBadCodePtr
GetCurrentProcess
lstrlenA
HeapFree
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 586B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 470B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ