Static task
static1
Behavioral task
behavioral1
Sample
fb2a6bfd7209c3e045b3d97663c73cab623c5b19cc3f49301290dd15b730546e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb2a6bfd7209c3e045b3d97663c73cab623c5b19cc3f49301290dd15b730546e.dll
Resource
win10v2004-20221111-en
General
-
Target
fb2a6bfd7209c3e045b3d97663c73cab623c5b19cc3f49301290dd15b730546e
-
Size
27KB
-
MD5
1118e85fe12619696bae6242d4b1f560
-
SHA1
919de7bd7b362710cfd72d0c90e3777ccc3b46af
-
SHA256
fb2a6bfd7209c3e045b3d97663c73cab623c5b19cc3f49301290dd15b730546e
-
SHA512
32b860715d8b64c7f3e573877f28d1c14fc466a9b05f83890e4dfccdbb54fbee7905af22aad47b71367d408bda6e26cbc39a93e9097568819f7feb952c994998
-
SSDEEP
384:jJF44vCSYch5FSUVcPTXBgHAkswNlT2T7pqaTmYdtlsa4KxWpOPe:jfhYcddmTaHAk3NlT2ToaTmYdIa4
Malware Config
Signatures
Files
-
fb2a6bfd7209c3e045b3d97663c73cab623c5b19cc3f49301290dd15b730546e.dll windows x86
1c99222ee9750dcc88f23b46ea3f79ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
closesocket
ntohs
ntohl
msvcrt
memcmp
strchr
free
atoi
malloc
_itoa
memcpy
strncpy
strcmp
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
fopen
fwrite
fclose
fread
time
memset
_strlwr
_initterm
_adjust_fdiv
kernel32
Sleep
GetCommandLineA
ExitProcess
GetModuleHandleA
LoadLibraryA
CopyFileA
GetProcAddress
GetModuleFileNameA
GetTempPathA
lstrlenA
lstrcpyA
ReadProcessMemory
lstrcatA
GetCurrentProcessId
GetCurrentProcess
VirtualProtectEx
CreateThread
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ