Control_RunDLL
RunDLL
Behavioral task
behavioral1
Sample
a3c14b0b4756017ee248d0fa029196060ca1f75a1fab7e9d81c74fbaac6a4797.dll
Resource
win7-20220223-en
Behavioral task
behavioral2
Sample
a3c14b0b4756017ee248d0fa029196060ca1f75a1fab7e9d81c74fbaac6a4797.dll
Resource
win10v2004-en-20220112
Target
a3c14b0b4756017ee248d0fa029196060ca1f75a1fab7e9d81c74fbaac6a4797
Size
119KB
MD5
959ff528ddbee66e49992cd654d41bab
SHA1
7b54da1fb2cbe877b13de309c01a7112224e1f40
SHA256
a3c14b0b4756017ee248d0fa029196060ca1f75a1fab7e9d81c74fbaac6a4797
SHA512
ef0852311f23f255624c31f320847b5d6ea2da86d81e0693207444b39b73a0f58a0e3f847c585e1a734dc902b1a429c53e193f742e81a60399ac061e76623b54
emotet
LEA
80.158.3.161:443
80.158.51.209:8080
80.158.35.51:80
80.158.63.78:443
80.158.53.167:80
80.158.62.194:443
80.158.59.174:8080
80.158.43.136:80
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Control_RunDLL
RunDLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ