kpueraf
Static task
static1
Behavioral task
behavioral1
Sample
a328ff13c9c8745fb9051225f56df40a695bfdbac6d18e60bc28853d434b4e2e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a328ff13c9c8745fb9051225f56df40a695bfdbac6d18e60bc28853d434b4e2e.dll
Resource
win10v2004-20221111-en
General
-
Target
a328ff13c9c8745fb9051225f56df40a695bfdbac6d18e60bc28853d434b4e2e
-
Size
15KB
-
MD5
76a81e598b281c6f30bf38ffdb2f3160
-
SHA1
8ad0c7ba5533e67bfec77acbab625e302c0e0124
-
SHA256
a328ff13c9c8745fb9051225f56df40a695bfdbac6d18e60bc28853d434b4e2e
-
SHA512
2a170455b0e9d8d6791f3cafbd82412afa06ab7333617ad737853eaaf8a59edcc7087b37570ab213884e29a8860163dfd163181c339686c70a75f223e9cc669a
-
SSDEEP
384:+mt5hs5MUqBTbXmY7tQ2dRxsMpyoJUsErm:+mt5hs5MUEXm4uQ+oqs7
Malware Config
Signatures
Files
-
a328ff13c9c8745fb9051225f56df40a695bfdbac6d18e60bc28853d434b4e2e.dll windows x86
6e1f4aa83fa2f5bc352214d644b26fa3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
ws2_32
WSAStartup
closesocket
gethostbyname
recv
send
setsockopt
shutdown
ntdll
RtlGetProcessHeaps
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 658B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ