DllMain
Static task
static1
Behavioral task
behavioral1
Sample
CryptBase.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
CryptBase.dll
Resource
win10v2004-20221111-en
General
-
Target
bdfc1fa349f5a653d3038d2d99197be5379562b4a089dad18c6901379547e64f
-
Size
1KB
-
MD5
e80964c07a7854c31f3da417ac947582
-
SHA1
2ff32f9e0ae1720d56b45daf37c2efa0bce0b166
-
SHA256
bdfc1fa349f5a653d3038d2d99197be5379562b4a089dad18c6901379547e64f
-
SHA512
f9e8ebeec4cda2b7c5bbbdfb260a90eea96bc50eeca1e57101506c50463838d8b7527256602b69455b08d3d70fd7eaf4d8cd4c8f3141ad63e4b373703377784c
Malware Config
Signatures
Files
-
bdfc1fa349f5a653d3038d2d99197be5379562b4a089dad18c6901379547e64f.cab
-
CryptBase.dll.dll windows x64
a1f457c8c549c5c430556bfe5887a4e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ExitProcess
GetCommandLineW
CreateProcessW
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
shell32
CommandLineToArgvW
msvcrt
memset
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ