DoDLLInstall
Static task
static1
Behavioral task
behavioral1
Sample
d29c9d330d14bd26d1dca58b6091a411eeec1086ef1cd2b2facce485b47b68b6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d29c9d330d14bd26d1dca58b6091a411eeec1086ef1cd2b2facce485b47b68b6.dll
Resource
win10v2004-20220812-en
General
-
Target
d29c9d330d14bd26d1dca58b6091a411eeec1086ef1cd2b2facce485b47b68b6
-
Size
88KB
-
MD5
8e85e4ab3080c01f4c7260ec863a9f82
-
SHA1
b8c03f8c55a6205cf625f9ca7db21111db7f17e5
-
SHA256
d29c9d330d14bd26d1dca58b6091a411eeec1086ef1cd2b2facce485b47b68b6
-
SHA512
4cd530566ff14b2055378ead435ed8bd651a842610af0fe0034ee01375cea5162216520e5889e95d583580525dbe2cb4d51defab581e32a5481161478b49a1e4
-
SSDEEP
1536:Cp7J/myvhTXuPpNFG4+oOPqbz5pzTamgOM2tZadUudPDSXox0p26LyCPOeko9kF5:C3WFG4eqxpymgOHZadVdPWLphLyC2RFr
Malware Config
Signatures
Files
-
d29c9d330d14bd26d1dca58b6091a411eeec1086ef1cd2b2facce485b47b68b6.dll windows x86
c9f883822d4990e6b7780d577d44a96b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetVersionExA
CloseHandle
VirtualFree
VirtualProtectEx
LoadLibraryA
GetLastError
VirtualAlloc
CreateEventA
Exports
Exports
Sections
.text Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ