Static task
static1
Behavioral task
behavioral1
Sample
App_Web_0qmfxgfw.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
App_Web_0qmfxgfw.dll
Resource
win10v2004-20221111-en
General
-
Target
App_Web_0qmfxgfw.dll.7z
-
Size
5KB
-
MD5
ab6090a57dcff2e34ef2300903344806
-
SHA1
0795cb1c4a913f3fd8bcaf93ae5321b3865e93ea
-
SHA256
23c0c3571849e48e55a14a6b7e9742996da0e1a2f9b8549d67820af21a2ca534
-
SHA512
9bf89f930e30f35448a37b09a0a1025d38ed104dc28fc34e833c368b7208dd9aba67c918fd0516a641f98b135daf020014cf5532abc9b47dc2221562864f0757
-
SSDEEP
96:yzXTTFI2oKo67WFG2WGmLsUUG3sYJUz+RI+hucgaXVIx54cOzRTEGfhQPIX:KXvFNoKobG2WhLWG7UyRjhucgaXexpOM
Malware Config
Signatures
Files
-
App_Web_0qmfxgfw.dll.7z.7z
Password: infected
-
App_Web_0qmfxgfw.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ