service
Static task
static1
Behavioral task
behavioral1
Sample
aa0f7eac2079f8091f2ba8be49b88feb59170aa3408932917b18e32cc46958c5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa0f7eac2079f8091f2ba8be49b88feb59170aa3408932917b18e32cc46958c5.dll
Resource
win10v2004-20220812-en
General
-
Target
aa0f7eac2079f8091f2ba8be49b88feb59170aa3408932917b18e32cc46958c5
-
Size
27KB
-
MD5
56263098afebd798eb74c068476693e8
-
SHA1
bd43fab8c18dbe1e06dfc97c93e47145115cf320
-
SHA256
aa0f7eac2079f8091f2ba8be49b88feb59170aa3408932917b18e32cc46958c5
-
SHA512
efb2c135262d325c54ce83745a78f784a565bcb8e0d416467f52d9e77f703840ec5664935017db0b7241608de442edb86e3620af22dd8a910efcca4fab224185
-
SSDEEP
768:gJRCh7huS4VinVNHtcHd3y+9MpJsOYF3Co2D:yRG7huSf3c9n9qJsryo2D
Malware Config
Signatures
Files
-
aa0f7eac2079f8091f2ba8be49b88feb59170aa3408932917b18e32cc46958c5.dll windows x86
112fe8db160a6a3928828e24a2df9294
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileSize
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
Sleep
VirtualAlloc
Exports
Exports
Sections
.flat Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE