Static task
static1
Behavioral task
behavioral1
Sample
download.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
download.dll
Resource
win10v2004-20220812-en
General
-
Target
download.dat
-
Size
12KB
-
MD5
5b0835f0c506cb53316b0737b683e44f
-
SHA1
2cfcf5df09a96a5ad01c9358f49f68a5c93dac92
-
SHA256
c330fc4b56a8facc891adb14a8f63041f85a59800a43e83209a5c2e2e28f4bae
-
SHA512
598ed19d7b2cc2b78c4ee4527c3881e50893853ff8b286946a0345866e804aeb5e80fe24d639780155998c5e54a58ecc5757d969ed3cefd1f6c51aa7e7099982
-
SSDEEP
192:1PgqlQEW0pQ9J2j110m/LUjvkG3GO7qq1j0SyIW1vUssaDkOjOc8O5HP0Q:yql5WRJ2bXjlG24j0NUssaDFB5HP0Q
Malware Config
Signatures
Files
-
download.dat.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ