CreateGameServiceManager
Static task
static1
Behavioral task
behavioral1
Sample
b41f63a076b2312473001a381f343a134db4c10423268e3fae4e10f23e4bc708.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b41f63a076b2312473001a381f343a134db4c10423268e3fae4e10f23e4bc708.dll
Resource
win10v2004-20221111-en
General
-
Target
b41f63a076b2312473001a381f343a134db4c10423268e3fae4e10f23e4bc708
-
Size
2.7MB
-
MD5
4dd52f5f10559512a6487c5adef4d044
-
SHA1
a9f7125ca3f2b12fb9384cdafbdbeb78887e3477
-
SHA256
b41f63a076b2312473001a381f343a134db4c10423268e3fae4e10f23e4bc708
-
SHA512
8f7c81e85504f0fb23f1e4cdb3065335429e7d57fdbd534c26031ce9c5990b85be07ac7d07cce9f1bfb9cc29858bdb766c73a4a66048043913d80c1bd76d5e52
-
SSDEEP
49152:uruvZQOZJXUzBaNllARhb3agwNGEy8EDv497aqKkp037srduC:AeyOXXOBaNqh2rNGElEDvKOqZpg7srdu
Malware Config
Signatures
Files
-
b41f63a076b2312473001a381f343a134db4c10423268e3fae4e10f23e4bc708.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 18KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 495KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE