Static task
static1
Behavioral task
behavioral1
Sample
App_Web_20pbq4iq.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
App_Web_20pbq4iq.dll
Resource
win10v2004-20220812-en
General
-
Target
App_Web_20pbq4iq.dll
-
Size
158KB
-
MD5
6bba1b0821f549e0e4b2a5bf023913a3
-
SHA1
da5e71d2f704910e93048bf7bd988a9bba2ec4d2
-
SHA256
89a272c03472814efb96b2c6eb3e59e209c11947d98f236add3178457cd06467
-
SHA512
d8f2579d2f59ca532b5090368326e199ffc9a79131b42e48484ee60766bf67110fb014cc025a2d6a4476a2de3e37e21d6035607cab903482542a9e528ba8fecc
-
SSDEEP
3072:CAFTVkPbbIEL+QPrVCIU9+v7sAsqs/2r8Idf/vd0texygTkjZ98t:EIEL+QPrVCIU9+a3Idf/ugTkjI
Malware Config
Signatures
Files
-
App_Web_20pbq4iq.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ