Static task
static1
Behavioral task
behavioral1
Sample
stage4.bin.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
stage4.bin.dll
Resource
win10v2004-20230220-en
General
-
Target
stage4.bin.dll
-
Size
996KB
-
MD5
3a9f2d0dbd485d899c1767ce9687fa24
-
SHA1
e127b2e0c296097ef6943bbcfc07e8d25cbe335e
-
SHA256
78f31d22897cf415ac8d36346739b48cb685aeda302deff263ecb0b03453e642
-
SHA512
3a3f826d7011c75113defbddece863497e199fe4449497f028a12f98add6d2d55ed1653a4e4f4b3d0892cc3c2f25d647110b33a60ac772f60fab808f5fc273fa
-
SSDEEP
24576:5QnREwy+O1y57XgBPovuSECIa7hLH71rrDmUNuwTzb1e:5QnR5y+dLGPiuSn97J7ZHmd8b
Malware Config
Signatures
Files
-
stage4.bin.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 995KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ