Static task
static1
Behavioral task
behavioral1
Sample
download.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
download.dll
Resource
win10v2004-20230221-en
General
-
Target
download.exe
-
Size
15KB
-
MD5
ffcbdcec38e077448a87f5546dada7bd
-
SHA1
f85348f1907332f6db448f27bab17574b72fe5e5
-
SHA256
962943eaa7772a2681845abf7f32d1681b5d766f673eb5ac5a4bb8ca07f8569e
-
SHA512
a1819503e718c99cc6396ed366eb4d298ce718aede432949e97b8faa2ed6403e3c3c8809548d2691c8443c5eb2b68ded37893dd6f2fc872fafe209c7a0e21e74
-
SSDEEP
192:ecXzNhHd3Op+fYVqRBIlgkqJGOqi4bP4me1eQInsEl3V9cJ9vKNawtw:eUNRhl3RBGq0Ti4b890sEl3IJxKzw
Malware Config
Signatures
Files
-
download.exe.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ