Static task
static1
Behavioral task
behavioral1
Sample
db02735a9203c74db5d7eacd9cc1aac23b53547f890d0ec842cc50f3c4224abf.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db02735a9203c74db5d7eacd9cc1aac23b53547f890d0ec842cc50f3c4224abf.dll
Resource
win10v2004-20221111-en
General
-
Target
db02735a9203c74db5d7eacd9cc1aac23b53547f890d0ec842cc50f3c4224abf
-
Size
155KB
-
MD5
b2a6217909ea53cdc5d595cf660efd05
-
SHA1
57db4091d625b8694b3c3f9639cf2a898fcd5f1b
-
SHA256
db02735a9203c74db5d7eacd9cc1aac23b53547f890d0ec842cc50f3c4224abf
-
SHA512
a820f0575836dd157df4d49662f8bff81e20fcbd3a1588d40f52a8ed5eacc8e1a1cef45f6c05f7cbd28d5f60d04a04eb7514b60a170e1915265664ec70cb09d1
-
SSDEEP
3072:53FGaH4+e4M/ajTYESEI+X51df5/hieWhn7/jxkViIzhJMg:53FGaH4KXjkEVI+XZf5/hieWh7/jxkVB
Malware Config
Signatures
Files
-
db02735a9203c74db5d7eacd9cc1aac23b53547f890d0ec842cc50f3c4224abf.dll windows x86
Code Sign
d7:bb:f6:32:fa:f6:c0:ef:fe:97:0b:2b:63:b3:f1:0a:1a:c7:b4:2aSigner
Actual PE Digestd7:bb:f6:32:fa:f6:c0:ef:fe:97:0b:2b:63:b3:f1:0a:1a:c7:b4:2aDigest Algorithmsha1PE Digest MatchesfalseTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
MainService
MainWork
ServiceMain
Sections
CODE Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
NewSec Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE