Behavioral task
behavioral1
Sample
89a718648156d8550b603dc04720c4540eda16c1db8e9ae3e6aeaad14fc3812b.dll
Resource
win7-20240903-en
General
-
Target
89a718648156d8550b603dc04720c4540eda16c1db8e9ae3e6aeaad14fc3812b.exe
-
Size
57KB
-
MD5
832282b2563ff2f7c678880a475f36d5
-
SHA1
7810657b5d153e13303663fc847ee8f8777d361d
-
SHA256
89a718648156d8550b603dc04720c4540eda16c1db8e9ae3e6aeaad14fc3812b
-
SHA512
ed66ad12c1175bb745ab322ae894c1df6a4e63878eda842eb877521007c0fc990853739ec93926263b8a14f2a57a5a36e4331b9df9ab73c4f3a0abf66de39961
-
SSDEEP
768:qLo2dWDwX1fFFbd2H1A5Y20N5L2TMqg5TZfuvZyx7A8xlnEJxoFw0ctLTRSg30u4:AnW8X1fFFbQcYNWvSA8fnGxWw0c6uJRY
Malware Config
Signatures
Files
-
89a718648156d8550b603dc04720c4540eda16c1db8e9ae3e6aeaad14fc3812b.exe.dll windows:6 windows x86 arch:x86
8f9a124a88878ac62589c50d13924ff4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
qsort
bsearch
wcslen
kernel32
VirtualFree
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
VirtualAlloc
VirtualProtect
VirtualQuery
FreeLibrary
GetProcAddress
LoadLibraryA
LoadLibraryW
IsBadReadPtr
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ