Static task
static1
Behavioral task
behavioral1
Sample
2d5f113da33b4c4d6992caad82cbb26e258c4dca2f39d83f021fcf0670b123cf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2d5f113da33b4c4d6992caad82cbb26e258c4dca2f39d83f021fcf0670b123cf.dll
Resource
win10v2004-20220901-en
General
-
Target
2d5f113da33b4c4d6992caad82cbb26e258c4dca2f39d83f021fcf0670b123cf
-
Size
24KB
-
MD5
7338d1fef3a48fe2b1b7012ea8a4a3d0
-
SHA1
fe278e639f41a0c659bfad6565f330b1ddf61c46
-
SHA256
2d5f113da33b4c4d6992caad82cbb26e258c4dca2f39d83f021fcf0670b123cf
-
SHA512
f8093abb7538904493e8cc55c8dd8d3d4d0d4b56b7ccd0343239dd205e17b370492c0e36d9886c81638876e3c4ad7deb92c4473bfa1de217eeb7425a80460eb5
-
SSDEEP
768:LyR3rYa8juaUVNVwSMwov7wEVPtUDRtMD:LQr5TwSMtUmUVU
Malware Config
Signatures
Files
-
2d5f113da33b4c4d6992caad82cbb26e258c4dca2f39d83f021fcf0670b123cf.dll windows x86
f95050da701da5c058e582e68cbce67a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
user32
wsprintfA
advapi32
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
msvcrt
_adjust_fdiv
malloc
_initterm
free
memcpy
time
srand
rand
memcmp
memset
kernel32
lstrcmpiA
WideCharToMultiByte
lstrlenW
GetPrivateProfileStringA
GetFileSize
lstrcmpA
lstrcatA
lstrcpyA
GetCurrentProcess
VirtualQueryEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
lstrcpynA
Sleep
ExitProcess
CreateThread
GetModuleFileNameA
CreateFileA
GetProcAddress
GetModuleHandleA
lstrlenA
CloseHandle
GlobalFree
ReadFile
GlobalAlloc
ws2_32
WSAStartup
WSACleanup
select
closesocket
recv
send
connect
gethostbyname
inet_addr
socket
htons
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ