Static task
static1
Behavioral task
behavioral1
Sample
XmlEditor.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
XmlEditor.dll
Resource
win10v2004-20221111-en
General
-
Target
XmlEditor.dll
-
Size
460KB
-
MD5
5770244401db6740798176b677f1817d
-
SHA1
c07984eb8de8d5d0a05874df3723d8515afb414c
-
SHA256
ecabcd2363b421a109770a07b7b70eb3a508c4ce87f4ee1c351bfcc90e6df448
-
SHA512
d45f619f74501cb0195a82551582ee4ef08bcb03be9c38d35969b8cd45824be502976d4c9b05288b2845029387213ad6d7a6cecbc0dbfec3ff8adfbcf56c2293
-
SSDEEP
3072:idQuyVyLhqqvlVzt8fFqOsiiZouM+KvoKUNFqnV0Jw0nAWCu:idQzAtqkyDs9ZoiKv7642Jw0nAWC
Malware Config
Signatures
Files
-
XmlEditor.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 448KB - Virtual size: 446KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ