Static task
static1
Behavioral task
behavioral1
Sample
6fe9a652293db71795acbc3d001631f03fe75af1d171a2df07d65c33c71e20d6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6fe9a652293db71795acbc3d001631f03fe75af1d171a2df07d65c33c71e20d6.dll
Resource
win10v2004-20220812-en
General
-
Target
6fe9a652293db71795acbc3d001631f03fe75af1d171a2df07d65c33c71e20d6
-
Size
5KB
-
MD5
a0f9080de1c5a0c10500b1a69790cadc
-
SHA1
52e26a5c697c98c80bef1c5b6c61f9ecd248177d
-
SHA256
6fe9a652293db71795acbc3d001631f03fe75af1d171a2df07d65c33c71e20d6
-
SHA512
6a847ce736fd38223fecd36c6285cb9683c4763986ef844e90ffe5fe5faf1c2aa2d42e733d127c40d05a3e505b7211d0edda5a4b4585d1e45995ba97a51381a0
-
SSDEEP
48:KGkI7bt6esB5BIihdUHylRYYrfw4qmOWuEwXDeBxpzLY1712TsXlo4CDnx:02AesB5BIg6y7YYM4LmXoLU5XS
Malware Config
Signatures
Files
-
6fe9a652293db71795acbc3d001631f03fe75af1d171a2df07d65c33c71e20d6.dll windows x86
7ef8f7c6f9e12f7e9045546514a38efb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreatePipe
CreateProcessA
CreateThread
DisconnectNamedPipe
LoadLibraryA
PeekNamedPipe
ReadFile
RtlZeroMemory
Sleep
TerminateProcess
WriteFile
lstrcatA
lstrcmpiA
lstrlenA
rasapi32
RasEnumConnectionsA
RasGetConnectStatusA
wsock32
WSACleanup
WSAStartup
accept
bind
closesocket
connect
gethostbyname
gethostname
inet_addr
inet_ntoa
listen
recv
send
socket
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 818B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ