Static task
static1
Behavioral task
behavioral1
Sample
29f5f12fd43cef513549534c40fce4dc4b0bf9bb91663c7686d7b6e21d99fc96.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29f5f12fd43cef513549534c40fce4dc4b0bf9bb91663c7686d7b6e21d99fc96.dll
Resource
win10v2004-20220812-en
General
-
Target
29f5f12fd43cef513549534c40fce4dc4b0bf9bb91663c7686d7b6e21d99fc96
-
Size
7KB
-
MD5
40d99c23958bcf42cb0e1e6e6dddef2b
-
SHA1
1e068e0fdfa97becdfa8aa7acd93a089c47efe50
-
SHA256
29f5f12fd43cef513549534c40fce4dc4b0bf9bb91663c7686d7b6e21d99fc96
-
SHA512
cc5f59d6a9e360247f8d6b52916f0fcc07c578d2bb20f8835066c5452c93858c9896fe021d33269a028c9ed8bb044edd40a9ca26944a3eb522310304678ad6c6
-
SSDEEP
96:h5137tXcfuuOCFbczQnSFD8ggiy/EkCdiyTondZuQ7gxlhS:hHLtyuuOo0JFg5ijpigo6X3S
Malware Config
Signatures
Files
-
29f5f12fd43cef513549534c40fce4dc4b0bf9bb91663c7686d7b6e21d99fc96.dll windows x86
fb746f4c42e7fde8f282f9768b0ccac3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateThread
VirtualProtect
VirtualAlloc
Sleep
CreateFileA
ReadFile
CloseHandle
TerminateProcess
lstrcpyA
GetCurrentDirectoryA
lstrcatA
WriteFile
lstrlenA
WideCharToMultiByte
lstrlenW
GetPrivateProfileStringA
OutputDebugStringA
user32
CharLowerA
wsprintfA
ws2_32
inet_addr
connect
closesocket
socket
WSAStartup
recv
send
htons
msvcrt
strstr
atoi
memcpy
memset
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ