Static task
static1
Behavioral task
behavioral1
Sample
5fd0d34ddbf474d76e63f0fbc172ed58c05580d1ac6d6c087d99032be950b482.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5fd0d34ddbf474d76e63f0fbc172ed58c05580d1ac6d6c087d99032be950b482.dll
Resource
win10v2004-20220812-en
General
-
Target
5fd0d34ddbf474d76e63f0fbc172ed58c05580d1ac6d6c087d99032be950b482
-
Size
6KB
-
MD5
6eda56c9d91ff45e7fd762a319ef3722
-
SHA1
079eaec9e5fd68e6b0333e45345b2b2988e887fe
-
SHA256
5fd0d34ddbf474d76e63f0fbc172ed58c05580d1ac6d6c087d99032be950b482
-
SHA512
b0c68456ecef927f557bf830a5a7400777191e37c702496393c2b4bfc645bd81fb5b9e68c8a95fa60ab16abafeb6fc98ff79a658e166f376cbad9b39ad385190
-
SSDEEP
96:MA/wSmnN36uqXlSuyKyZsl46AWUZXfMWGyG5St14g8JHz2WRyfL4PA/wSmhZklI/:GCpVluKZU+uGHg8JT2W0fL4xbHQA
Malware Config
Signatures
Files
-
5fd0d34ddbf474d76e63f0fbc172ed58c05580d1ac6d6c087d99032be950b482.dll windows x86
cf90a3a23f2bfe55f0a3dfe3279fdd7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord389
ord3229
ord540
ord1228
ord800
ord5204
ord5808
ord1182
ord1253
ord342
ord1168
ord823
ord690
msvcrt
memcpy
strcmp
atoi
__CxxFrameHandler
??1type_info@@UAE@XZ
memset
strlen
strcat
fopen
fread
??3@YAXPAX@Z
printf
strstr
fclose
_strnicmp
kernel32
CreateThread
CloseHandle
ReleaseMutex
WriteFile
WaitForSingleObject
PeekNamedPipe
Sleep
GetSystemDirectoryA
CreateMutexA
CreatePipe
ReadFile
GetExitCodeThread
TerminateProcess
CreateProcessA
advapi32
RegDeleteKeyA
ws2_32
inet_addr
closesocket
recv
htons
setsockopt
WSAStartup
send
connect
socket
getsockopt
Sections
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 386B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ