ServerMain
Static task
static1
Behavioral task
behavioral1
Sample
f9f323b7ddfe88a8064ab9e4327cbca6541c96d65e3430e4a05981a27b78e1c5.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9f323b7ddfe88a8064ab9e4327cbca6541c96d65e3430e4a05981a27b78e1c5.dll
Resource
win10v2004-20220812-en
General
-
Target
f9f323b7ddfe88a8064ab9e4327cbca6541c96d65e3430e4a05981a27b78e1c5
-
Size
13KB
-
MD5
b6928f9b5059c558bf89975a64e11da0
-
SHA1
a7ce5831695609f0e63b1a22b1eaea0680f081b0
-
SHA256
f9f323b7ddfe88a8064ab9e4327cbca6541c96d65e3430e4a05981a27b78e1c5
-
SHA512
9b7496234e502801758affdf6f81a37f0a8a77dfb51df82e0cf7670569208075d07d168cc7c50ba3b22305297db9dd1287379e6bff312bbd79c0f2a80c49e2e0
-
SSDEEP
192:TD0GY9E4y1EiWDUcCk1BFisjQ/kKnWE0UZyL:FqEd24k1ziKunWEry
Malware Config
Signatures
Files
-
f9f323b7ddfe88a8064ab9e4327cbca6541c96d65e3430e4a05981a27b78e1c5.dll windows x86
5a55803254806edfeddb9a378de54549
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
sprintf
strncpy
strstr
memset
_strrev
_stricmp
memcpy
strcmp
strcpy
_access
kernel32
GetCommandLineA
OpenProcess
TerminateProcess
DeleteFileA
GetTempFileNameA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
FreeLibrary
CopyFileA
GetFileAttributesA
Sleep
lstrlenA
GetDriveTypeA
CloseHandle
CreateThread
ExitProcess
GetLastError
CreateMutexA
dbghelp
SearchTreeForFile
ws2_32
WSACleanup
socket
htons
htonl
bind
recvfrom
WSAStartup
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ