Static task
static1
Behavioral task
behavioral1
Sample
f0f8798d48d764d6b44ef5ab417463103edfda850f3e5419c74b210a2efe4996.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f0f8798d48d764d6b44ef5ab417463103edfda850f3e5419c74b210a2efe4996.dll
Resource
win10v2004-20230220-en
General
-
Target
7e1c63c4896de6bb721865c1ef0d0f35.bin
-
Size
13KB
-
MD5
733dfe2b61f95dee292eca161585a54e
-
SHA1
a112d07a3cd0a2ea619bd16128fac0317e1752eb
-
SHA256
c2bc2d0357b1f7a2be2274f8f4578ee5a62380cc934d97d3604212e769b620a8
-
SHA512
0fb77b61854d36cee3b0336f9b900e80e9441f8de12b6ce9096dc89cc0d0575d90e4a3344ee2b9c2f1d8d4cb1a7ebf521f5ca371f5d871f9b81b6f22de274061
-
SSDEEP
384:NP15xiD8NtsHVrwiFEzWKBSDpbVTOX9AxzO:H5xi0t2wivNkKxS
Malware Config
Signatures
Files
-
7e1c63c4896de6bb721865c1ef0d0f35.bin.zip
Password: infected
-
f0f8798d48d764d6b44ef5ab417463103edfda850f3e5419c74b210a2efe4996.dll.dll windows x86
Password: infected
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ