ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
f91983bf06430909163f41960bea6962799dd5c98c3c3823dbeb09161c6e035d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f91983bf06430909163f41960bea6962799dd5c98c3c3823dbeb09161c6e035d.dll
Resource
win10v2004-20221111-en
General
-
Target
f91983bf06430909163f41960bea6962799dd5c98c3c3823dbeb09161c6e035d
-
Size
30KB
-
MD5
a40807f41527cb75183fb0b908acb763
-
SHA1
02602c2c36739e62a375be899b40253a4159b107
-
SHA256
f91983bf06430909163f41960bea6962799dd5c98c3c3823dbeb09161c6e035d
-
SHA512
5aeee2da2007e82059754c3e09c06ba6863548c9ef2d8823b7babd7a590196730ada1a576798e516da3c6dabce548e8844d1a6da79d52eb1f180caaccee2611f
-
SSDEEP
768:kgrE5VL7UQEAuBIIpwJOCPPY//VJ5n4lpfX2R2m:kDPUn1Rp7Qa5n4LLm
Malware Config
Signatures
Files
-
f91983bf06430909163f41960bea6962799dd5c98c3c3823dbeb09161c6e035d.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.ziyue! Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.373250 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ