Static task
static1
Behavioral task
behavioral1
Sample
632-139-0x0000000007150000-0x00000000077CA000-memory.dmp.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
632-139-0x0000000007150000-0x00000000077CA000-memory.dmp.dll
Resource
win10v2004-20220812-en
General
-
Target
632-139-0x0000000007150000-0x00000000077CA000-memory.dmp.sect_fix
-
Size
6.5MB
-
MD5
9f924175a97da7334c10f97ce9fdd676
-
SHA1
71c027384a189b919b434aa4303df85d847dd338
-
SHA256
ba8d93919f9c3501b0d27dc267f0768e6e3efd67f141a43ef7e5096fc6134e6f
-
SHA512
5c6a5484bcae3ffe770123b1f28453a3b29b4ff53509faa7095ccaf079d460e7fe7ec1803fdc4f12326a43fba1245a54d437ec54cdc766df91491edddaddf795
-
SSDEEP
24576:M85YtCtkkrE5h87zY/o8+NoqATatop2FEKkIVmp2FkKkIQFvh:M+tkkrE5h87FqqAYE6k3
Malware Config
Signatures
Files
-
632-139-0x0000000007150000-0x00000000077CA000-memory.dmp.sect_fix.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ