GetThreadBot
Static task
static1
Behavioral task
behavioral1
Sample
98d5dcbcaa9505f99dc0d39d28bc47c4ac6e8f80a5b48814ee1e9f88f380081f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98d5dcbcaa9505f99dc0d39d28bc47c4ac6e8f80a5b48814ee1e9f88f380081f.dll
Resource
win10v2004-20220812-en
General
-
Target
98d5dcbcaa9505f99dc0d39d28bc47c4ac6e8f80a5b48814ee1e9f88f380081f
-
Size
14KB
-
MD5
5bb8990238192dcfd58d0cf6cd91ff55
-
SHA1
58d7830b625114ef003bcfc6fb8a7fd10fe63328
-
SHA256
98d5dcbcaa9505f99dc0d39d28bc47c4ac6e8f80a5b48814ee1e9f88f380081f
-
SHA512
415a3b568d809fb2e56fe3c722d781e92cd61a41852de6205fc0f209dce7cc3634017c252222ab264020607f32a97d66f4cbcd9350b59f8220b92261d53e1072
-
SSDEEP
384:r98aaD0wYNAamsFPpW9Pzi9Gzz1c9s5qo4x:R+AwAAamQxW97zHn54
Malware Config
Signatures
Files
-
98d5dcbcaa9505f99dc0d39d28bc47c4ac6e8f80a5b48814ee1e9f88f380081f.dll windows x86
344b27bc93b1534ff6ab849cc89b3867
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
shlwapi
StrToIntA
StrStrA
ws2_32
gethostbyname
bind
connect
getsockname
send
__WSAFDIsSet
shutdown
closesocket
socket
ioctlsocket
WSAGetLastError
getsockopt
select
WSAStartup
listen
recv
kernel32
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
WaitForSingleObject
SetLastError
Sleep
GetTickCount
lstrlenA
lstrcpyA
CreateThread
lstrcatA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
ExitThread
user32
wsprintfA
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ