Behavioral task
behavioral1
Sample
c2427b15b4c7f7ee02403136b2f7d97586bf77ef389c47771349be0ce4c4da85.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
c2427b15b4c7f7ee02403136b2f7d97586bf77ef389c47771349be0ce4c4da85.dll
Resource
win10v2004-20241007-en
General
-
Target
c2427b15b4c7f7ee02403136b2f7d97586bf77ef389c47771349be0ce4c4da85.exe
-
Size
88KB
-
MD5
8746b5980b7f6050382eca539508cd93
-
SHA1
948c89aa32bd36de40068fcfb551b24535e7c03d
-
SHA256
c2427b15b4c7f7ee02403136b2f7d97586bf77ef389c47771349be0ce4c4da85
-
SHA512
4db0be66413aaac282702e5fd1cdfee90d0f17da0fc03a8e50f156019e300def1c57a7612fdea6c45e0d7952428b90fdc4303c704891f8594fa3fab510661729
-
SSDEEP
768:4roILwnJs9IqHq32PZHSXqfMlklNTlGztWVyZywpo7c2A3hUiXS/TQXCePFzsucE:2TwuG8gq0liN00VWVpNUz/TArcxQ3
Malware Config
Signatures
Files
-
c2427b15b4c7f7ee02403136b2f7d97586bf77ef389c47771349be0ce4c4da85.exe.dll windows:6 windows x86 arch:x86
8f9a124a88878ac62589c50d13924ff4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntdll
qsort
bsearch
wcslen
kernel32
VirtualFree
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
VirtualAlloc
VirtualProtect
VirtualQuery
FreeLibrary
GetProcAddress
LoadLibraryA
LoadLibraryW
IsBadReadPtr
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ