Static task
static1
Behavioral task
behavioral1
Sample
49f1cffed7e435dec28750fffb336b8785cf284181902ee4f59a4c38984c5ddd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49f1cffed7e435dec28750fffb336b8785cf284181902ee4f59a4c38984c5ddd.dll
Resource
win10v2004-20220901-en
General
-
Target
49f1cffed7e435dec28750fffb336b8785cf284181902ee4f59a4c38984c5ddd
-
Size
113KB
-
MD5
5c0a4fa6d81d6dd352941edd01970630
-
SHA1
1642a825892ceb1217a73d1fe10e871262a9564d
-
SHA256
49f1cffed7e435dec28750fffb336b8785cf284181902ee4f59a4c38984c5ddd
-
SHA512
296bf518978491a1eaae04533a0e594a5731ef85070b305c4715e61e86baedb52fec037bfd907ebeabc6779ffe049ee711725b7d62ecc7d098f9e85412345e0d
-
SSDEEP
1536:1dHKTy7VqijCn8YIOf424cKau2f9d01Dd+NvKGemHZxJeYC:2TyRqi9YIp24Wug9d0v+lKGemHZxJez
Malware Config
Signatures
Files
-
49f1cffed7e435dec28750fffb336b8785cf284181902ee4f59a4c38984c5ddd.dll windows x86
Code Sign
3a:ef:97:0c:fe:3e:7f:c5:05:e3:d5:f6:c5:9c:ac:1b:42:12:d0:1cSigner
Actual PE Digest3a:ef:97:0c:fe:3e:7f:c5:05:e3:d5:f6:c5:9c:ac:1b:42:12:d0:1cDigest Algorithmsha1PE Digest MatchesfalseTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
BeginProc
EndProc
RunP
ServiceMain
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.spin Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE