b
Static task
static1
Behavioral task
behavioral1
Sample
payload.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
payload.dll
Resource
win10v2004-20220901-en
General
-
Target
payload.dll.exe
-
Size
652KB
-
MD5
a07d575b289ed3a80357c789fa485f14
-
SHA1
048acf120fa7a468a0275212b0a1f32ab8e441c2
-
SHA256
5c09c4175f49c749bf225f84236538086f5b9f1ad8522531fca34739246e4ad9
-
SHA512
15ef8e78e87dcea54f104f1ee1f005f78343a9b1e0ea941b421e3183da5136c6f158f05961b3016ed8fe485abac9fbfabc6e496a7e791913c672ef03839f842c
-
SSDEEP
12288:sRcFR26XFHnPGvjihyc3EdnDzxT0hyDEUiKVTOg4KOrrRSGCMNNlwd:sRMBnPGvjih50nDFTXOKV6WsRSqwd
Malware Config
Signatures
Files
-
payload.dll.exe.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ