Behavioral task
behavioral1
Sample
7b4d51fea73496b77abfb42720cbb30220d76dbae73d284bc6ddd1653ffa39f8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b4d51fea73496b77abfb42720cbb30220d76dbae73d284bc6ddd1653ffa39f8.dll
Resource
win10v2004-20221111-en
General
-
Target
7b4d51fea73496b77abfb42720cbb30220d76dbae73d284bc6ddd1653ffa39f8
-
Size
88KB
-
MD5
071a27eebc77a9ff2a4801bb596c4da0
-
SHA1
e36f95989d4f8f9149883440d6af9c4da5a92324
-
SHA256
7b4d51fea73496b77abfb42720cbb30220d76dbae73d284bc6ddd1653ffa39f8
-
SHA512
76d44402035ea9450ad38e0bfecc72c987d00d3bb552b212b54730a86d3f35c5c23ed6b2dfdb71ea0651147bce42441c4ef4341c21f80ed3d825670a69b04a5a
-
SSDEEP
1536:oqgQACHYOzQ2LsIde9RtUif3yVsFxhCcx5XZZsJ3t8CG2VGYWWEMr:oqrHbsUif3yVWxvZZsQCGMeE
Malware Config
Signatures
Files
-
7b4d51fea73496b77abfb42720cbb30220d76dbae73d284bc6ddd1653ffa39f8.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE