Control_RunDLL
RunDLL
Behavioral task
behavioral1
Sample
a9c68d527223db40014d067cf4fdae5be46cca67387e9cfdff118276085f23ef_unpacked.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9c68d527223db40014d067cf4fdae5be46cca67387e9cfdff118276085f23ef_unpacked.dll
Resource
win10v2004-20220812-en
Target
a9c68d527223db40014d067cf4fdae5be46cca67387e9cfdff118276085f23ef_unpacked
Size
119KB
MD5
959ff528ddbee66e49992cd654d41bab
SHA1
7b54da1fb2cbe877b13de309c01a7112224e1f40
SHA256
a3c14b0b4756017ee248d0fa029196060ca1f75a1fab7e9d81c74fbaac6a4797
SHA512
ef0852311f23f255624c31f320847b5d6ea2da86d81e0693207444b39b73a0f58a0e3f847c585e1a734dc902b1a429c53e193f742e81a60399ac061e76623b54
SSDEEP
3072:ZqZol+l/2YQ8S6/aI34vxV7W4LgW3DQumyKBLGMzJo:sugl/nQS3ExV7lkWrKBCMz
emotet
LEA
80.158.3.161:443
80.158.51.209:8080
80.158.35.51:80
80.158.63.78:443
80.158.53.167:80
80.158.62.194:443
80.158.59.174:8080
80.158.43.136:80
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Control_RunDLL
RunDLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ