Static task
static1
Behavioral task
behavioral1
Sample
Unconfirmed 917883.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Unconfirmed 917883.dll
Resource
win10v2004-20221111-en
General
-
Target
Unconfirmed 917883.crdownload
-
Size
390KB
-
MD5
fe7c081ab01ce05b53efe244a7e4ecc0
-
SHA1
a9382705d851b7a011be236e68f747299d3e449e
-
SHA256
85845b8f9df228c0d22a5abe3429a0941d373e0e0aa3cc5f171e51e409dcb339
-
SHA512
3b4f39600d1dbb0bc6175597a91ed4f35f07c3ba6b5f8cb3482fe47095eb611692977a2e833358e1e775337925cc3878c737adf6bddfed23d3df813cfe73b346
-
SSDEEP
6144:6R0sEaf27zoRorzjGxcMbJ8Cn7H204JxwQcaQppYppcmZK4:6RFYERva0p25K4
Malware Config
Signatures
Files
-
Unconfirmed 917883.crdownload.dll windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 389KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ