Static task
static1
Behavioral task
behavioral1
Sample
a80c3c2c74ad24f6f83a4e5f73563df643615bb12c195db885523fdaea5090cc.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a80c3c2c74ad24f6f83a4e5f73563df643615bb12c195db885523fdaea5090cc.dll
Resource
win10v2004-20230220-en
General
-
Target
f68d78b766467f4a3b0da6773cdd7647.bin
-
Size
684KB
-
MD5
c0621477dc21fcc2b0e012a05657f596
-
SHA1
1325d18c452994249e7b9cfe8ea4f9b27a100359
-
SHA256
7285ead469b697400eff509c4a1d3b0f50d5f3063c2392046a35b6c3a0f791cc
-
SHA512
b238e121ed360c7b9ced3e9ed1291471cd45798c32ad9677c00a5a6788e419799d8cec1fef6b0a2a9275598fe763253744e3ca5e6fe71acc920c0d8a5284ec04
-
SSDEEP
12288:nhq3pPOkM85QYfWh/vtKIVA0UK3SuWv/rUEYDIt84DPLoBTBur/t1794uRA/whIX:A3pW5QfUry0X3kv/84Dc3q/txt6AG
Malware Config
Signatures
Files
-
f68d78b766467f4a3b0da6773cdd7647.bin.zip
Password: infected
-
a80c3c2c74ad24f6f83a4e5f73563df643615bb12c195db885523fdaea5090cc.dll.dll windows x86
Password: infected
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ