ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
0282e75763f73e4cf02d00a4ee5ce338c85f73d7ee27e5cd55875576f14fca6c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0282e75763f73e4cf02d00a4ee5ce338c85f73d7ee27e5cd55875576f14fca6c.dll
Resource
win10v2004-20220812-en
General
-
Target
0282e75763f73e4cf02d00a4ee5ce338c85f73d7ee27e5cd55875576f14fca6c
-
Size
7KB
-
MD5
6ea2aa3356c57f5baeff01408daabc30
-
SHA1
be97e73b82923e19627957004e979f7eb6cf0026
-
SHA256
0282e75763f73e4cf02d00a4ee5ce338c85f73d7ee27e5cd55875576f14fca6c
-
SHA512
b96ca7302605d39cc5542bcc2b65ccfc89c65675bf07f0e6786918e9375c77fb4ffc26008301b8138137c42cd9be95f6946732aa8d10e325035414b43a90eec2
-
SSDEEP
96:yoqFCfu2DZ+LqldiZU+0oVl2OqfnpVaMoLH3d4h1WkQM49io490V+fND:yRs8LqldkVQnDaMN1WkEI0V+f5
Malware Config
Signatures
Files
-
0282e75763f73e4cf02d00a4ee5ce338c85f73d7ee27e5cd55875576f14fca6c.dll windows x86
7081035cf8191e2aebcf1084a0955cc9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetVersionExA
CreatePipe
CreateProcessA
ReadFile
PeekNamedPipe
CreateThread
CloseHandle
WriteFile
Sleep
advapi32
SetServiceStatus
RegisterServiceCtrlHandlerA
ws2_32
recv
send
gethostname
gethostbyname
inet_ntoa
WSAStartup
socket
htons
inet_addr
connect
closesocket
setsockopt
msvcrt
_adjust_fdiv
_strlwr
malloc
_initterm
free
strncmp
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 813B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 402B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ