Static task
static1
Behavioral task
behavioral1
Sample
e6ff434fbb288fb16f228292d41ed7cad38d06eb091ef6b4ab5da61ac96de580.dll
Resource
win7-20220812-en
General
-
Target
e6ff434fbb288fb16f228292d41ed7cad38d06eb091ef6b4ab5da61ac96de580
-
Size
274KB
-
MD5
d046de3d748585f4740f11f44c5e7c31
-
SHA1
2b04641bd67e7d4bc6170bbd05b33a33dea521da
-
SHA256
e6ff434fbb288fb16f228292d41ed7cad38d06eb091ef6b4ab5da61ac96de580
-
SHA512
8f5bbdd39a6932b7b30be8736e1d5f7df4d20b894a3396f18daa93b018f7fa0651d3d915d37a13f84359439e23060cd1f9ac12b7c5aeff8f2353b8e0422df6e1
-
SSDEEP
6144:sq0e5NP+8ZqKMLLnMxOl6sl4IgKW1rYxk4xJS4H1m3tz3qLWYemA:s2Cnj6sYS36aC
Malware Config
Signatures
Files
-
e6ff434fbb288fb16f228292d41ed7cad38d06eb091ef6b4ab5da61ac96de580.dll windows x86
d9ab9518e03078d437251443e7507be9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
comdlg32
GetFileTitleW
ole32
CoReactivateObject
winspool.drv
QueryColorProfile
Sections
.code Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 37.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ