wocaoni
Static task
static1
Behavioral task
behavioral1
Sample
ef39f3086180d4f9751a2f116c5a18950bb62e39efa38a24bed4b30f86912f73.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef39f3086180d4f9751a2f116c5a18950bb62e39efa38a24bed4b30f86912f73.dll
Resource
win10v2004-20220901-en
General
-
Target
ef39f3086180d4f9751a2f116c5a18950bb62e39efa38a24bed4b30f86912f73
-
Size
274KB
-
MD5
3c397ae2f53698319151a669a6e38ded
-
SHA1
869bc3b18111686bff2109b061c1c147a1c52378
-
SHA256
ef39f3086180d4f9751a2f116c5a18950bb62e39efa38a24bed4b30f86912f73
-
SHA512
0cb6ad25bf157e14793a51df1b840ae29dd8cda3a588e16cee024ea2eb65dd8bab8a7feea56b48830b51c2bd1bdf76f28b7d64a2603a067a992e25375bba15b8
-
SSDEEP
6144:Ip6qCW3hlTMo3MTveKI7+b1E6Lm8y/Wr43P89Fi:u64HQo30veP7q1TLnwWr2kG
Malware Config
Signatures
Files
-
ef39f3086180d4f9751a2f116c5a18950bb62e39efa38a24bed4b30f86912f73.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE