kdcfrea
Static task
static1
Behavioral task
behavioral1
Sample
593c9cee5599c33c3d67edd40c048fefc244d7841b38178d1d657789d653c4f3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
593c9cee5599c33c3d67edd40c048fefc244d7841b38178d1d657789d653c4f3.dll
Resource
win10v2004-20220812-en
General
-
Target
593c9cee5599c33c3d67edd40c048fefc244d7841b38178d1d657789d653c4f3
-
Size
15KB
-
MD5
df290a9fcdc791e0906257ac80fff287
-
SHA1
5f736010381f2ed19603ef83be48650f3edcaa58
-
SHA256
593c9cee5599c33c3d67edd40c048fefc244d7841b38178d1d657789d653c4f3
-
SHA512
2eeaed7c1cc7c9277b02168b8d6301fd9deec384cd09ba787099573d89a6abebe8dad068cb0a02d473c6c22ddf3a0df6d4650b2ffc1f9cfe718de011667eafda
-
SSDEEP
384:EplTfqyi8TVRmtLcj4RENamoJlOwDLuMEECAn:MSQRmVcjgYXo+IuMx9
Malware Config
Signatures
Files
-
593c9cee5599c33c3d67edd40c048fefc244d7841b38178d1d657789d653c4f3.dll windows x86
7f723dfc812561c0ee86340dbcc7a243
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeaps
LoadLibraryW
CreateThread
ws2_32
WSAStartup
closesocket
gethostbyname
recv
send
setsockopt
shutdown
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA