Static task
static1
Behavioral task
behavioral1
Sample
f6a9c25a647abda32fdba32b423b1fe4817589667d2325a2ba6c6440a842f197.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6a9c25a647abda32fdba32b423b1fe4817589667d2325a2ba6c6440a842f197.dll
Resource
win10v2004-20220812-en
General
-
Target
f6a9c25a647abda32fdba32b423b1fe4817589667d2325a2ba6c6440a842f197
-
Size
36KB
-
MD5
6f9d95518a033a308620f6953c466980
-
SHA1
c169e590fea1a40f39a2b2d0911fc5ad4408b212
-
SHA256
f6a9c25a647abda32fdba32b423b1fe4817589667d2325a2ba6c6440a842f197
-
SHA512
31a818a8809c0d1fae7ed0b338fb48401c181e6fdd6d1aaf53b4c3bac918a5e448595c7d3c6103b211184b1d191340a10a387fb179b72612e065f0cf24e8de05
-
SSDEEP
96:qZ/Gom9y95CpIdFTbX2sqhA5WO9I//LfhhhemeHMol1xT:qBm9c5CpaXehA8O9I3zh+meHMolf
Malware Config
Signatures
Files
-
f6a9c25a647abda32fdba32b423b1fe4817589667d2325a2ba6c6440a842f197.dll windows x86
dd5f595b09450a79ec057332bd2c64ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlImageDirectoryEntryToData
RtlImageNtHeader
strchr
strncpy
memset
memcpy
kernel32
GetModuleFileNameA
VirtualAlloc
FreeLibrary
CreateThread
LoadLibraryA
SetUnhandledExceptionFilter
GetModuleHandleA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 430B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ