_FEGAEFHDE@0
Static task
static1
Behavioral task
behavioral1
Sample
c659770ae8ca116769c23d7306642702d8cc56dec4fa8898a66b3b32cb405b87.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c659770ae8ca116769c23d7306642702d8cc56dec4fa8898a66b3b32cb405b87.dll
Resource
win10v2004-20220812-en
General
-
Target
c659770ae8ca116769c23d7306642702d8cc56dec4fa8898a66b3b32cb405b87
-
Size
88KB
-
MD5
ef4de67d4dc6fa641af2986cc14c861a
-
SHA1
b668dc0068e8c5a036abefa51d0d610393de79af
-
SHA256
c659770ae8ca116769c23d7306642702d8cc56dec4fa8898a66b3b32cb405b87
-
SHA512
fe8c42d036fafe395329927e2320b441d6cf717c4009e986818ba00f2763b866e28768dbfad0584a16c87ba5438a7747acc3481c628dfd5418a6f9106b4bca4f
-
SSDEEP
1536:88YlvjEDQymcs46Ifuutxpj7GzobisJmLtP:dYlIDA4huutxpIomaUtP
Malware Config
Signatures
Files
-
c659770ae8ca116769c23d7306642702d8cc56dec4fa8898a66b3b32cb405b87.dll windows x86
cc19e3eb53e4fe8c1f2c84ad2d728701
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetTickCount
FindAtomA
IsValidLanguageGroup
HeapFree
rpcrt4
RpcStringBindingParseW
RpcBindingVectorFree
RpcBindingToStringBindingW
RpcEpUnregister
RpcEpRegisterW
RpcServerListen
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ