Static task
static1
Behavioral task
behavioral1
Sample
a715635cdcca7badbf73ef6c1b657dbdd131a4474746f3e4c953387bd4188c24.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a715635cdcca7badbf73ef6c1b657dbdd131a4474746f3e4c953387bd4188c24.dll
Resource
win10v2004-20221111-en
General
-
Target
a715635cdcca7badbf73ef6c1b657dbdd131a4474746f3e4c953387bd4188c24
-
Size
16KB
-
MD5
668b89968e1ccc07da1b953b42bda4b1
-
SHA1
955eb28d1e198ecf8c2798bfe69e3c58869fe0b6
-
SHA256
a715635cdcca7badbf73ef6c1b657dbdd131a4474746f3e4c953387bd4188c24
-
SHA512
1d5266c7c8f733cc0f79f0abab0fe56e8ba7064ee4cbf396784514e54a1b43969af8829d22bf4f898579f5ae76b9780e4c91842eabe5649ac8e94a66fe8cec2d
-
SSDEEP
384:nUBBgG4s+vyv69AeUAobx26g6juzGE6Jwtjkl:Ur/4nimlC8IuzGE6Wtjkl
Malware Config
Signatures
Files
-
a715635cdcca7badbf73ef6c1b657dbdd131a4474746f3e4c953387bd4188c24.dll windows x86
5a0ab55f616b558c50a3292b9114a401
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
Sleep
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.attach Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE