Static task
static1
Behavioral task
behavioral1
Sample
heofree_menu.dll
Resource
win10v2004-20220812-en
General
-
Target
heofree_menu.dll
-
Size
264KB
-
MD5
4c300f563a119c71b1730177f3dbab68
-
SHA1
00aa06f3e36d46e403f377af3b03f7b27aeb0533
-
SHA256
2a7c1304bf918474d06d81d58d20996b64ad157d3dac1242fbed7506495cdc80
-
SHA512
2ad7a508f5d251addd873b77d6ff83f01ea57af7a3dc3ba61548223f385916c9dd1f5ab4860c0320218f29834cc77935a4e69675367b283ded26cc0a30da0967
-
SSDEEP
3072:ZGwp/vcPsLFKvss9j8x6d/GzlXH/axFy0ZkyeEmnim1Jybmkzv:ZGOKvvx/0lXHSa0iyeEmnim1cR
Malware Config
Signatures
Files
-
heofree_menu.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ