Static task
static1
Behavioral task
behavioral1
Sample
c7bd6c1ec720f784381281493231103cd1d5e8bbfd096b659261136f7c284126.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7bd6c1ec720f784381281493231103cd1d5e8bbfd096b659261136f7c284126.dll
Resource
win10v2004-20220812-en
General
-
Target
c7bd6c1ec720f784381281493231103cd1d5e8bbfd096b659261136f7c284126
-
Size
48KB
-
MD5
0e4d2948701f1314971a046e2c8904dc
-
SHA1
ce91f0a33676c66c1903132deea5dfeefaf9dbab
-
SHA256
c7bd6c1ec720f784381281493231103cd1d5e8bbfd096b659261136f7c284126
-
SHA512
20f3800804069e629434f4cd50e412d82c54ca6d572da23587960c2d1006d7a552586e542991f084b31c053985c40c5cf677397eff7d5d0fbb8a2a18e4bfb569
-
SSDEEP
768:mvXM37bNXCNJfXQeEhFbJkc/0TrrULuauZ:2Mn6vQ7zQrrULuF
Malware Config
Signatures
Files
-
c7bd6c1ec720f784381281493231103cd1d5e8bbfd096b659261136f7c284126.dll windows x86
feb1c42a371e4f9bfcd7d124bbf9082b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
FreeLibrary
LoadLibraryA
ws2_32
recv
gethostbyname
inet_ntoa
htons
socket
connect
setsockopt
closesocket
send
WSAStartup
inet_addr
msvcrt
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ