Static task
static1
Behavioral task
behavioral1
Sample
40041524ffa0e8c7a19f1ae0cc8c41e38854958e2ed6a44b31481cb21b8cd35b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
40041524ffa0e8c7a19f1ae0cc8c41e38854958e2ed6a44b31481cb21b8cd35b.dll
Resource
win10v2004-20220812-en
General
-
Target
40041524ffa0e8c7a19f1ae0cc8c41e38854958e2ed6a44b31481cb21b8cd35b
-
Size
28KB
-
MD5
91899f20d3f0df8720d0209990c34713
-
SHA1
ef997ac3c945450d15b9f18bdfff65e7cd659092
-
SHA256
40041524ffa0e8c7a19f1ae0cc8c41e38854958e2ed6a44b31481cb21b8cd35b
-
SHA512
c191c6eb1d85e198f0d488943e13afe8c03005f16f46c6130c62d37a34e2dadaa09594d1b3cd5cd87aca48ba278d910fc3bd6defbf4974e0eb8d3144e0127149
-
SSDEEP
384:NUzNPQ+JOITCATlcT+OVdjaqtA4zBK+CjQvv0Pvcb2oSAsIO/M8nS3aED3pZabc2:Sq4DTCAZOhHt9ES2Gs//M8SK6XYNeR
Malware Config
Signatures
Files
-
40041524ffa0e8c7a19f1ae0cc8c41e38854958e2ed6a44b31481cb21b8cd35b.dll windows x64
c60b399778f95f6178c763386289a2e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
_snprintf
strtoul
strncpy
strstr
_strnicmp
RtlRandom
_stricmp
memset
memcpy
__chkstk
shlwapi
SHDeleteKeyW
StrStrIA
wininet
InternetCrackUrlA
ws2_32
closesocket
send
htons
socket
recv
WSAStartup
connect
gethostbyname
crypt32
CryptStringToBinaryA
CryptBinaryToStringA
kernel32
CreateMutexA
GetModuleFileNameA
GetTickCount
HeapCreate
Sleep
HeapFree
CreateThread
GetSystemTime
DeleteFileW
HeapAlloc
GetLastError
HeapReAlloc
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ