kdufroa
Static task
static1
Behavioral task
behavioral1
Sample
ce4a69a75f7a54edd0bf0b67bec8c3837b64ccc74af3bc7dc3aa26821270c414.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce4a69a75f7a54edd0bf0b67bec8c3837b64ccc74af3bc7dc3aa26821270c414.dll
Resource
win10v2004-20220812-en
General
-
Target
ce4a69a75f7a54edd0bf0b67bec8c3837b64ccc74af3bc7dc3aa26821270c414
-
Size
72KB
-
MD5
86ed54df955b4bd964124a3300f00a37
-
SHA1
9370a4d3584c112fca75434001da16fc6dda61a4
-
SHA256
ce4a69a75f7a54edd0bf0b67bec8c3837b64ccc74af3bc7dc3aa26821270c414
-
SHA512
6e591fde03e078d25c2837969104b2360485687b43e735897c8fa497e6fbde3b47967e64dd141f6177ba6f5d88d4e8dbe78e8d2bf134ffb0fe228ec054e512ec
-
SSDEEP
384:T2TbTbTbTxnwmLisTERmKNojfRHQAloJbtkply2EK:TAnV8RmK6j5wGoz0y2
Malware Config
Signatures
Files
-
ce4a69a75f7a54edd0bf0b67bec8c3837b64ccc74af3bc7dc3aa26821270c414.dll windows x86
7f723dfc812561c0ee86340dbcc7a243
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeaps
LoadLibraryW
CreateThread
ws2_32
WSAStartup
closesocket
gethostbyname
recv
send
setsockopt
shutdown
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA