run
Static task
static1
Behavioral task
behavioral1
Sample
11.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
11.dll
Resource
win10v2004-20220812-en
General
-
Target
11.dll
-
Size
5KB
-
MD5
db00c1b9f5f149bd41f2cfd3427ca3d5
-
SHA1
f7030cf0718aadb42f87298d8900ffed862f502e
-
SHA256
8847abf7022a08377a73c11aabf3b7c80fd5e12d1c41d1358811116d4bae767f
-
SHA512
8532a22bb9bad37fb7abafdc7dcc59ca5ee40ccfa76fc5722becad2aa6a0249aeba120e48ab73b08fe5bdfc0d1058b3acfde5cd750f35919662979f6faa5a1c6
-
SSDEEP
48:CVVrkEtP9TxNpmmbnQYFJNaT82a/phoHIryWiCys7PvO32nClb:UZ9TxzmmTfkT88OysDSb
Malware Config
Signatures
Files
-
11.dll.dll windows x64
d165f4f76f4422f2915de232ed908b3b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
CreateProcessW
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 822B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ