_Rdr_HookAllApps@8
Static task
static1
Behavioral task
behavioral1
Sample
c87a209df115d620fba770b88c51aa5652287dd59797657d76fce6afc097a41e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c87a209df115d620fba770b88c51aa5652287dd59797657d76fce6afc097a41e.dll
Resource
win10v2004-20221111-en
General
-
Target
c87a209df115d620fba770b88c51aa5652287dd59797657d76fce6afc097a41e
-
Size
6KB
-
MD5
c7a0c5d04e93a6c564a40dc318fbb044
-
SHA1
140cff414bc4dd7e65b0e47035d7e23801403da5
-
SHA256
c87a209df115d620fba770b88c51aa5652287dd59797657d76fce6afc097a41e
-
SHA512
f66fd2c63e3edb289a8d8d651a8b71f3d9512ebfd7d34f41d1cd60e08782422af0cbd93e99beb5f053b5cd190a7229f964a5586dfdc001b67bff9cf39d9bf266
-
SSDEEP
96:qx5o8+Ukaz5Qaz5QVerQJpx3tvVjlxYWKytH8GHmPnf:c5d+UkvvQEHR7ZtePf
Malware Config
Signatures
Files
-
c87a209df115d620fba770b88c51aa5652287dd59797657d76fce6afc097a41e.dll windows x86
73daf95dcd6aaf58765a6ed77ad87a2f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
strstr
dbghelp
ImageDirectoryEntryToData
kernel32
LoadLibraryW
GetModuleHandleA
GetCurrentProcessId
Module32Next
Module32First
CreateToolhelp32Snapshot
CloseHandle
LoadLibraryExW
DisableThreadLibraryCalls
GetProcAddress
VirtualQuery
WriteProcessMemory
GetCurrentProcess
lstrcmpiA
LoadLibraryA
LoadLibraryExA
GetSystemInfo
user32
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ