GetPlo
Static task
static1
Behavioral task
behavioral1
Sample
6aecfdf5402610d6710f398a6e7da90bb4abf76cfbed9b8e4cdaea020792df3a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6aecfdf5402610d6710f398a6e7da90bb4abf76cfbed9b8e4cdaea020792df3a.dll
Resource
win10v2004-20220812-en
General
-
Target
6aecfdf5402610d6710f398a6e7da90bb4abf76cfbed9b8e4cdaea020792df3a
-
Size
48KB
-
MD5
27a12aafabec8d2a5499096935bed59e
-
SHA1
c767c259e42e0c9a59286edb7e65acf6df3600b7
-
SHA256
6aecfdf5402610d6710f398a6e7da90bb4abf76cfbed9b8e4cdaea020792df3a
-
SHA512
7f23452259231a28cf0400237f56cccd5178114a152b9decd40add42792e3b1c9544349c8b5ae65a2ec7fd7bcac7211bd8ec5c3e547b50d0d677edda4e8e7b34
-
SSDEEP
768:GSjIMtcm3rWwRYKfkbbe+WJwhfFxIl49RdItj:GSjxtccWwRzfIbe+cwPt9nI5
Malware Config
Signatures
Files
-
6aecfdf5402610d6710f398a6e7da90bb4abf76cfbed9b8e4cdaea020792df3a.dll windows x86
cfe775e34c01aed69db19275f2ac636a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
CloseHandle
GlobalFree
GlobalAlloc
GetSystemDefaultUILanguage
GlobalMemoryStatusEx
GetVersionExA
FreeLibrary
InterlockedExchange
lstrcpyA
ExitProcess
WaitForSingleObject
GetModuleHandleA
GetTickCount
lstrlenA
GetCurrentProcessId
OutputDebugStringA
Sleep
CreateThread
user32
MessageBoxA
wsprintfA
advapi32
RegOpenKeyExA
msvcrt
_adjust_fdiv
rand
srand
memcpy
memset
strlen
sprintf
strncpy
strcspn
strstr
strcpy
_except_handler3
strchr
strcat
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
malloc
free
_initterm
ws2_32
gethostbyname
inet_addr
sendto
htonl
htons
setsockopt
WSASocketA
WSAStartup
closesocket
socket
send
connect
recv
WSAIoctl
shutdown
__WSAFDIsSet
select
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ