Static task
static1
Behavioral task
behavioral1
Sample
CustomArms.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
CustomArms.dll
Resource
win10v2004-20221111-en
General
-
Target
CustomArms.dll
-
Size
28KB
-
MD5
1016bba3e9da915fa65aa9eb4e665521
-
SHA1
fff2413321833b148d4a8bcfa14f8750a0fbead4
-
SHA256
81eca4e6e7e2b87ec224be55cdbb9f7e0e6f5e2f25ce9506fb93b8cca01da0b9
-
SHA512
22568a7b9dc5ea05fd89d4da0f706e79a93a6f387f41e73b598a8b4768647c33c873f58f7667abb7bd168793b1b58fc96b308e3ab79fee46687671200536d250
-
SSDEEP
768:giAWUX8J9fF0WdFbKQRYW0G25IjHC3iybTA:28t0WdF/Rn25Ijiyyg
Malware Config
Signatures
Files
-
CustomArms.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ