CreateNewDirectPlay
Static task
static1
Behavioral task
behavioral1
Sample
b7ac4eeb420537b65943e5a17468b16e65d17a00a9f1be9d45d93adf15c9265b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7ac4eeb420537b65943e5a17468b16e65d17a00a9f1be9d45d93adf15c9265b.dll
Resource
win10v2004-20220812-en
General
-
Target
b7ac4eeb420537b65943e5a17468b16e65d17a00a9f1be9d45d93adf15c9265b
-
Size
218KB
-
MD5
6ac28e7a4299bfc1d5be274d42865a07
-
SHA1
37f40731211a66e967f279d95180417b62b85aae
-
SHA256
b7ac4eeb420537b65943e5a17468b16e65d17a00a9f1be9d45d93adf15c9265b
-
SHA512
7574888e1ab4188093eebcd95a5cbcf436715f12a3e1c0b82a73528fef4cefbd06afaa4780017d83be35b8139d27ed1cd52ddfc7faae99fdd85d60733ea35db4
-
SSDEEP
6144:u7HPrDdngeeNMPaZRupn+aZGVXpEqI2JX6gAy/AwF:ozAEc8B+XLEqIeX6gAy/1
Malware Config
Signatures
Files
-
b7ac4eeb420537b65943e5a17468b16e65d17a00a9f1be9d45d93adf15c9265b.dll windows x86
62426e67c2c9e1b732d460106a5c7de1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
LocalFree
InitializeCriticalSection
CreateEventA
IsBadWritePtr
CloseHandle
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
SetThreadPriority
GetCurrentThread
GetTickCount
GetComputerNameA
ResetEvent
WaitForSingleObject
CreateThread
TerminateThread
lstrcpyA
lstrlenA
lstrcpynA
lstrcmpA
LocalAlloc
InterlockedDecrement
GetLastError
SetLastError
RtlUnwind
wsock32
WSAStartup
htons
getsockname
setsockopt
bind
closesocket
recvfrom
sendto
WSACleanup
socket
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE