tztrswy
Static task
static1
Behavioral task
behavioral1
Sample
75df8877dd746fc62f9d6221e891c212.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
75df8877dd746fc62f9d6221e891c212.dll
Resource
win10v2004-20220812-en
General
-
Target
75df8877dd746fc62f9d6221e891c212.exe
-
Size
43KB
-
MD5
75df8877dd746fc62f9d6221e891c212
-
SHA1
c19b1f1fc02f7038d631c2214a18f54d1134b90b
-
SHA256
96db800aa830afc3f456ce85d9617773693c2cc412757683a20d7f3587cf4f75
-
SHA512
b8cb2a1ed90d0efa637df9fae9f9c4f66959809fd85bb0080ed4a89e64b2443ba38576d5c8be15b552dafe7c74a61ebb0db9ac60fc699335eb7700203da267c7
-
SSDEEP
768:ThVua6V7jtmanRzWKTp5GJKfk+nF+PsIJhVYoF3kVmWzn3LirJ6Hw:ThVkjt5nRzWKntnkPsIJhVYoF3kVmWzF
Malware Config
Signatures
Files
-
75df8877dd746fc62f9d6221e891c212.exe.dll windows x64
6cb7c652105d9b2b2ff7b5309e0e37cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
GetCurrentProcessId
Exports
Exports
Sections
.posth Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qrqlo Size: 512B - Virtual size: 61B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yurvn Size: 512B - Virtual size: 58B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ysabd Size: 1024B - Virtual size: 842B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE