ServerMain
Static task
static1
Behavioral task
behavioral1
Sample
54af4386edac8513527e3cf50aa40054385ce03cd663e37a652f686ccb51bba3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
54af4386edac8513527e3cf50aa40054385ce03cd663e37a652f686ccb51bba3.dll
Resource
win10v2004-20220812-en
General
-
Target
54af4386edac8513527e3cf50aa40054385ce03cd663e37a652f686ccb51bba3
-
Size
13KB
-
MD5
0ef16bd94c7d49289d7c9d59e7b4aa20
-
SHA1
ed00d40e6be845baa521b2749c0b171a444dc12c
-
SHA256
54af4386edac8513527e3cf50aa40054385ce03cd663e37a652f686ccb51bba3
-
SHA512
711fb93769b39a5ac74e4541eb77cac15f5f606ebacbc2bc8fb6cf47e7995cd9bd35412f20b524ffc2524ad6135e0604725eae6112da637b1f68c8c6974cea6f
-
SSDEEP
192:dD0GY9E4y1EiWDUcCk1BFisjQ/kKnWE0bcZyL:TqEd24k1ziKunWEby
Malware Config
Signatures
Files
-
54af4386edac8513527e3cf50aa40054385ce03cd663e37a652f686ccb51bba3.dll windows x86
5a55803254806edfeddb9a378de54549
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
sprintf
strncpy
strstr
memset
_strrev
_stricmp
memcpy
strcmp
strcpy
_access
kernel32
GetCommandLineA
OpenProcess
TerminateProcess
DeleteFileA
GetTempFileNameA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
FreeLibrary
CopyFileA
GetFileAttributesA
Sleep
lstrlenA
GetDriveTypeA
CloseHandle
CreateThread
ExitProcess
GetLastError
CreateMutexA
dbghelp
SearchTreeForFile
ws2_32
WSACleanup
socket
htons
htonl
bind
recvfrom
WSAStartup
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ