Static task
static1
Behavioral task
behavioral1
Sample
c6ce11cbb5a5904ef14f1944c7c7c1cb562dd9682c85fe8f4f04defb2571758b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6ce11cbb5a5904ef14f1944c7c7c1cb562dd9682c85fe8f4f04defb2571758b.dll
Resource
win10v2004-20220812-en
General
-
Target
c6ce11cbb5a5904ef14f1944c7c7c1cb562dd9682c85fe8f4f04defb2571758b
-
Size
9KB
-
MD5
fdee7979632752fe9e4dbed0759d148c
-
SHA1
c9751dbc300b49756e7f0757e19a831dc3c74e17
-
SHA256
c6ce11cbb5a5904ef14f1944c7c7c1cb562dd9682c85fe8f4f04defb2571758b
-
SHA512
75c83e461c27f90682ef2907ffa6651f64164b2101c9a7f4556ae0d3bab7dd5eb6f97b0c7d15ee88ec3e429461c88194da437dadee475dbb97462398e6af59a2
-
SSDEEP
192:GzhfAwICa7mbaZ7VS0FrUXdgsBHy/ozSar7sr7vE+E6tYo9t8mf:6h43y+VSaoy9E+9qo9tLf
Malware Config
Signatures
Files
-
c6ce11cbb5a5904ef14f1944c7c7c1cb562dd9682c85fe8f4f04defb2571758b.dll windows x86
bffc78a8e88a2492a027d8232f4292d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
Sleep
DeleteFileA
CloseHandle
WriteFile
lstrcpyA
HeapFree
lstrcatA
GetVersionExA
MultiByteToWideChar
HeapAlloc
GetFileSize
lstrcpynA
GetProcessHeap
CreateThread
ExitProcess
CreateProcessA
GetCommandLineA
CreateFileA
GetLastError
ReadFile
RtlUnwind
GetStringTypeW
GetStringTypeA
user32
CharLowerA
advapi32
CreateServiceA
CloseServiceHandle
OpenSCManagerA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
ws2_32
socket
recv
send
connect
htons
closesocket
inet_addr
gethostbyname
WSAStartup
WSACleanup
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1014B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 390B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ