Static task
static1
Behavioral task
behavioral1
Sample
dumped.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dumped.dll
Resource
win10v2004-20230220-en
General
-
Target
dumped.bin
-
Size
724KB
-
MD5
0bafe182bd11414a68d80e2e2952608b
-
SHA1
7a34de4b1f0a4ded13080e198dce0a8aaddf99d6
-
SHA256
7d138d6cac3fdfee3b4ba51844b3df3ba9e99f7d005e73a0b8c20d2473c41309
-
SHA512
0e2b97bf5f524ae02f1e9b1dfbc5a4031704181459301cadb7deb241daf53373220a64c349a366d2066b796d2359fd61f5cebe1546824572d9fb6be585fa0eb3
-
SSDEEP
12288:roIGfYnbNycJOuj1QFhIwIA1IycTIXdOuUrwPTQrPZKn5tWiCD:r1ocAk1QFhF8yHV6Z4fWv
Malware Config
Signatures
Files
-
dumped.bin.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 677KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ