MyConnectServer
MySendData
Behavioral task
behavioral1
Sample
4ff9aaf08e87c159437ddbfe0469ccdb573835f5441f2d405067630ddf921187.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ff9aaf08e87c159437ddbfe0469ccdb573835f5441f2d405067630ddf921187.dll
Resource
win10v2004-20220812-en
Target
4ff9aaf08e87c159437ddbfe0469ccdb573835f5441f2d405067630ddf921187
Size
145KB
MD5
5fbab7aaec6685e6bbf21cff25ea5935
SHA1
df305254565041746a616b8b175e81535adb3c40
SHA256
4ff9aaf08e87c159437ddbfe0469ccdb573835f5441f2d405067630ddf921187
SHA512
818af5cd25dd57a047514ac300aaef2da0d934b859111fc1d3c6f8ca7a3a9de3255e65c61d245e2f798f42b07fb10bcb856b9b1a84ba15e80995d5c7b52dc5a0
SSDEEP
3072:l2meWXRyljrAPsRSlH3ez9axAEXXEnhqfw2abzVtkFvb7a:EEBylIPsRS6MHba98
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
QueryPerformanceCounter
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
SendMessageW
MessageBoxA
??2@YAPAXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
closesocket
MyConnectServer
MySendData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ