Static task
static1
Behavioral task
behavioral1
Sample
a7662b30c9a0b923b656dec766837a6ac641debdcecd7790259a613fdf08f1b3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7662b30c9a0b923b656dec766837a6ac641debdcecd7790259a613fdf08f1b3.dll
Resource
win10v2004-20221111-en
General
-
Target
a7662b30c9a0b923b656dec766837a6ac641debdcecd7790259a613fdf08f1b3
-
Size
228KB
-
MD5
ab9f32b387fcf59976c8efb7c343e723
-
SHA1
ab4ddf52a5672d745b8a066f031ec28cdf99ba59
-
SHA256
a7662b30c9a0b923b656dec766837a6ac641debdcecd7790259a613fdf08f1b3
-
SHA512
3be00df87d098d79e589a4bd0bd9b996b871036de6e8f700549c761e31715868c67d7b139de0cbed7fd3b3c2b6580ce24e039b29aade793cfe0db30f96d79e1d
-
SSDEEP
6144:pCc8HtdaJRcL+8bEvFreWbSKTUagmRfk2+PNb:6/rWbI8Y
Malware Config
Signatures
Files
-
a7662b30c9a0b923b656dec766837a6ac641debdcecd7790259a613fdf08f1b3.dll windows x86
5b7b89cf97e6c9cb92a256b4dc3df833
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
gethostname
getsockname
ntohs
gethostbyname
inet_ntoa
send
getsockopt
setsockopt
select
__WSAFDIsSet
inet_addr
connect
WSAStartup
socket
ioctlsocket
WSAGetLastError
htons
bind
listen
accept
closesocket
recv
kernel32
InterlockedDecrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetOEMCP
GetACP
GetCPInfo
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetLastError
Sleep
GetTickCount
CloseHandle
GetCurrentThreadId
MapViewOfFile
CreateFileMappingA
CreateFileA
FormatMessageA
OutputDebugStringA
TerminateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnmapViewOfFile
LocalFree
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
CreateThread
TlsSetValue
ExitThread
DeleteFileA
MoveFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetLocaleInfoW
InterlockedIncrement
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
VirtualAlloc
IsBadWritePtr
SetConsoleCtrlHandler
WriteFile
GetStdHandle
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
UnhandledExceptionFilter
RtlUnwind
GetFileAttributesA
GetCurrentProcessId
WideCharToMultiByte
MultiByteToWideChar
user32
wvsprintfA
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE