Static task
static1
Behavioral task
behavioral1
Sample
a5d9d4be1d70dfc55fddac294219c2709aa74856651f2463ac7e5691857d3587.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a5d9d4be1d70dfc55fddac294219c2709aa74856651f2463ac7e5691857d3587.dll
Resource
win10v2004-20220812-en
General
-
Target
a5d9d4be1d70dfc55fddac294219c2709aa74856651f2463ac7e5691857d3587
-
Size
100KB
-
MD5
f979c6a3e668c5073c4c6506461b034e
-
SHA1
bc586cc026833fee9b5441abb1cdfd57376ce182
-
SHA256
a5d9d4be1d70dfc55fddac294219c2709aa74856651f2463ac7e5691857d3587
-
SHA512
76b34e6709ff6427bf7890fb9c30424371d0b62b5d413e73a09c3fd35a4f9d8ba88857f1ae088bb2fd41314e8c83f3a33712da9f6f3d15be74b3604c606db295
-
SSDEEP
1536:DoQvHe3aLhv5QtX5n8uBjTkawJbVqIfYqLODgr+YeQRk3hV:DoQvHHbQtp/BjgawJYIkWreQRoh
Malware Config
Signatures
Files
-
a5d9d4be1d70dfc55fddac294219c2709aa74856651f2463ac7e5691857d3587.dll windows x86
e5396deb75a90913ca68a6a37fb37974
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
htonl
recvfrom
recv
sendto
send
closesocket
WSACleanup
WSAStartup
ntohs
inet_ntoa
inet_addr
socket
select
WSAGetLastError
ioctlsocket
connect
msvcrt
time
tolower
islower
toupper
strncat
realloc
memset
memcpy
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
strncmp
strncpy
rand
sprintf
sscanf
free
malloc
__CxxFrameHandler
kernel32
GetProcessHeap
MultiByteToWideChar
Sleep
SystemTimeToFileTime
GetSystemTime
RtlUnwind
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ