Static task
static1
Behavioral task
behavioral1
Sample
79e1ccbfdf84436f54902e79d229d4bf0841dbcd825d6a35afe8c25d41c27f3c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79e1ccbfdf84436f54902e79d229d4bf0841dbcd825d6a35afe8c25d41c27f3c.dll
Resource
win10v2004-20220812-en
General
-
Target
79e1ccbfdf84436f54902e79d229d4bf0841dbcd825d6a35afe8c25d41c27f3c
-
Size
24KB
-
MD5
5ebd7e4f1fab1dd795ecb8dd90bb10c4
-
SHA1
ad3e2b33396dd880e42a0c4e9e0078cbcf9fe8cb
-
SHA256
79e1ccbfdf84436f54902e79d229d4bf0841dbcd825d6a35afe8c25d41c27f3c
-
SHA512
ebdadce34b10713597eee5a5625cdf675510a7bd81cb33e165e0d402b6e971347cdc23c5d76e297bf6500b9c6247c3233fd456620f6d43d4e652c0fde1d184db
-
SSDEEP
384:Cwv04S9pZtd3UXGC+8lfBIs4ueqzioe88IccCjl:CwTS9pZtd3UXllfBIs4ueqzioeTI9C
Malware Config
Signatures
Files
-
79e1ccbfdf84436f54902e79d229d4bf0841dbcd825d6a35afe8c25d41c27f3c.dll windows x86
98e1470a2108ffbb2907530e8938dcaa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohs
closesocket
msvcrt
malloc
_initterm
_itoa
free
strchr
memcmp
atoi
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
fopen
fwrite
fclose
fread
time
memset
_strlwr
_adjust_fdiv
kernel32
Sleep
GetModuleHandleA
lstrlenA
LoadLibraryA
CopyFileA
GetProcAddress
GetModuleFileNameA
GetTempPathA
lstrcpyA
DeleteFileA
ReadProcessMemory
lstrcatA
GetCurrentProcessId
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
CreateThread
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 926B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 714B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ