AcceptEx
GetAcceptExSockaddrs
NSPStartup
TransmitFile
WSPStartup
getnetbyname
inet_network
Static task
static1
Behavioral task
behavioral1
Sample
a4105fc67651a29a475f6baaa2eabc09edb1924dbf2db71f5c838f00ca695a7c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4105fc67651a29a475f6baaa2eabc09edb1924dbf2db71f5c838f00ca695a7c.dll
Resource
win10v2004-20220812-en
Target
a4105fc67651a29a475f6baaa2eabc09edb1924dbf2db71f5c838f00ca695a7c
Size
5KB
MD5
ba033ef46edde45761707cdacce3c9d0
SHA1
26d7b38d0de907bdc037288324b27183a43fd0f4
SHA256
a4105fc67651a29a475f6baaa2eabc09edb1924dbf2db71f5c838f00ca695a7c
SHA512
7ab8580896eede4cbd279cffc85a2ad23ab9bdbab24ec655ff98e126b6040ab7ef8eb6d740d240a0160cbc8fe8699fa91812bf1568ca2ffe6f8fbadc3327f97d
SSDEEP
96:Tsidv53+q3cKUWIt6Yn0dMfg/MhBjMeMoMSMEF:TsOoqMKUWIpF
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wcsrchr
LdrGetProcedureAddress
RtlImageNtHeader
wcslen
swprintf
wcscpy
LdrProcessRelocationBlock
RtlImageDirectoryEntryToData
ZwClose
memcpy
ZwQueryVolumeInformationFile
ZwOpenFile
LoadLibraryA
VirtualFree
FreeLibrary
IsDebuggerPresent
GetProcAddress
LoadLibraryW
VirtualAlloc
MD5Update
MD5Init
MD5Final
AcceptEx
GetAcceptExSockaddrs
NSPStartup
TransmitFile
WSPStartup
getnetbyname
inet_network
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ