noyluwa
Static task
static1
Behavioral task
behavioral1
Sample
25b75a42e4d9e17cbd73a75d7b2427f176377fb3dafa1d443a525abd974c7c47.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25b75a42e4d9e17cbd73a75d7b2427f176377fb3dafa1d443a525abd974c7c47.dll
Resource
win10v2004-20220901-en
General
-
Target
25b75a42e4d9e17cbd73a75d7b2427f176377fb3dafa1d443a525abd974c7c47
-
Size
15KB
-
MD5
6d46015ff62073eac25ac76c6cb4c175
-
SHA1
825b69899a2e802051378af0487f0becd1d2d780
-
SHA256
25b75a42e4d9e17cbd73a75d7b2427f176377fb3dafa1d443a525abd974c7c47
-
SHA512
a6c6251afca7c376e8aad1a4ae2c2128dc04a6f8f64592c2d0ad9e48e7eda392e5dc521948c78a0965a9a95f277203721805a780ee1a1296d85bed4f1992c24b
-
SSDEEP
192:RUi/JKWTSZm4/VfsbmN1aV0MSoJdXeykYKWxVoD+cLk:RUYKWTSZmCfMmNgWMSoJevXrL
Malware Config
Signatures
Files
-
25b75a42e4d9e17cbd73a75d7b2427f176377fb3dafa1d443a525abd974c7c47.dll windows x86
5057e10d473c9b2457c462d1548adbb8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
ws2_32
WSAStartup
closesocket
gethostbyname
recv
send
setsockopt
shutdown
ntdll
RtlGetAce
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 662B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ