F4OffLine
Static task
static1
Behavioral task
behavioral1
Sample
d1502c6a7ad0f753e21460ae50d501562cec022735806ea600a53aee72fdc89b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d1502c6a7ad0f753e21460ae50d501562cec022735806ea600a53aee72fdc89b.dll
Resource
win10v2004-20220812-en
General
-
Target
d1502c6a7ad0f753e21460ae50d501562cec022735806ea600a53aee72fdc89b
-
Size
7KB
-
MD5
777b272bdcaa141ac1fb307199421893
-
SHA1
bcc2fc47459be6a5eee08cb36b838a6db7f44a68
-
SHA256
d1502c6a7ad0f753e21460ae50d501562cec022735806ea600a53aee72fdc89b
-
SHA512
535a26c8091bb43d305770718baa45021a2024dea2074c462125a8c15f7a76837f449f2c164ab563f12b289fefa840262fd52c2cc80b4adae7c35609d4bddb8f
-
SSDEEP
96:yIDUr5PS6gFBr8VfLl7wwYb5kekgGRMd/aUcaU:nUr069TlUqSGRs
Malware Config
Signatures
Files
-
d1502c6a7ad0f753e21460ae50d501562cec022735806ea600a53aee72fdc89b.dll windows x86
878aecf2b0289c3ae5255b7daa17aafc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
DeleteFileA
FindAtomA
GetAtomNameA
GetWindowsDirectoryA
msvcrt
__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memset
sprintf
strlen
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 135B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ