ktipmot
Static task
static1
Behavioral task
behavioral1
Sample
ecc05ba901d2d069ace3770eb91d423d4b2df921a39255aa771584c8c29df492.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ecc05ba901d2d069ace3770eb91d423d4b2df921a39255aa771584c8c29df492.dll
Resource
win10v2004-20220812-en
General
-
Target
ecc05ba901d2d069ace3770eb91d423d4b2df921a39255aa771584c8c29df492
-
Size
15KB
-
MD5
34c6ab3459382726e72f67ca6d09683e
-
SHA1
8d99f3782ad822239629cf7d669da1a3cdb06b72
-
SHA256
ecc05ba901d2d069ace3770eb91d423d4b2df921a39255aa771584c8c29df492
-
SHA512
f8ec4d81be5002b24861b6a9cd40e199870bb3b06790f48e09ed91df2aa62ba486303c7c6c2409f39bda28bf9cbe572eda5d4c484b55e30c23d8e15fe9576f41
-
SSDEEP
384:j/kxHU+FOafifTBEmBQnR/YXloJ2eFeyAUwzB2:jkxHU+FTwEmyRw1ow+AUM2
Malware Config
Signatures
Files
-
ecc05ba901d2d069ace3770eb91d423d4b2df921a39255aa771584c8c29df492.dll windows x86
7f723dfc812561c0ee86340dbcc7a243
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeaps
LoadLibraryW
CreateThread
ws2_32
WSAStartup
closesocket
gethostbyname
recv
send
setsockopt
shutdown
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA