input
Static task
static1
Behavioral task
behavioral1
Sample
f489bcb4f0723be0cdc6358c43b33236130f99d82f78a472f7c6cee9887dce12.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f489bcb4f0723be0cdc6358c43b33236130f99d82f78a472f7c6cee9887dce12.dll
Resource
win10v2004-20220901-en
General
-
Target
f489bcb4f0723be0cdc6358c43b33236130f99d82f78a472f7c6cee9887dce12
-
Size
40KB
-
MD5
739af088593e31ed58a9cda7da962e1d
-
SHA1
bb19ee63c799c1ccd3c9d66509a742e099842c53
-
SHA256
f489bcb4f0723be0cdc6358c43b33236130f99d82f78a472f7c6cee9887dce12
-
SHA512
b0f6e454e0abf43ad4a6d192cc0e8f66f7a0de6414ead4d819eabfd6afae14c441d0617ae7e0a1a9602026491fa82cfc06642151e8062167f1aaa6781b8c01b9
-
SSDEEP
768:I42lR8XjCyC2XHTeHrTb0GXjxYhBimUvXb3CeGlI3s8rk:I428Xjc2X8TbnuBUvXTB9rk
Malware Config
Signatures
Files
-
f489bcb4f0723be0cdc6358c43b33236130f99d82f78a472f7c6cee9887dce12.dll windows x86
5544a558178895c012502baa823128b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
connect
advapi32
SetSecurityDescriptorDacl
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE