lebniva
Static task
static1
Behavioral task
behavioral1
Sample
b4878eedaf4b337ccbb7b1f3e31bd2ce05fa7ec16033983c53f5229d393b223d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b4878eedaf4b337ccbb7b1f3e31bd2ce05fa7ec16033983c53f5229d393b223d.dll
Resource
win10v2004-20220812-en
General
-
Target
b4878eedaf4b337ccbb7b1f3e31bd2ce05fa7ec16033983c53f5229d393b223d
-
Size
16KB
-
MD5
a373a56d3ac9ba24d0b38f6dec977034
-
SHA1
70139e2b984f6f5c96ae225341c12dc80df8b213
-
SHA256
b4878eedaf4b337ccbb7b1f3e31bd2ce05fa7ec16033983c53f5229d393b223d
-
SHA512
71a1ab094dac20f6128cc066f3267e8cbc73bdd9f598768572550c9c333fae012765b988c6fd7bf53f552afc993da8104f01cd69c394e6a130dec1680e674bc2
-
SSDEEP
384:eZB9OmB9O4+TTINzmZFCoyR5DMMoJk4mI+Se:Zn4nzmXCPoEie
Malware Config
Signatures
Files
-
b4878eedaf4b337ccbb7b1f3e31bd2ce05fa7ec16033983c53f5229d393b223d.dll windows x86
1ba72d295d97bf47fbfe1721e3c2acab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ws2_32
closesocket
gethostbyname
recv
send
setsockopt
ntdll
RtlGetAce
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 294B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 690B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ