FURONGJIEJIE
Static task
static1
Behavioral task
behavioral1
Sample
9fcc9d4c9b93665b99a1655fc2945e8a3d58b40cb457117e12dfe87714da6111.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9fcc9d4c9b93665b99a1655fc2945e8a3d58b40cb457117e12dfe87714da6111.dll
Resource
win10v2004-20220901-en
General
-
Target
9fcc9d4c9b93665b99a1655fc2945e8a3d58b40cb457117e12dfe87714da6111
-
Size
13KB
-
MD5
0a6d2612d045a7ef66059b6323aa6550
-
SHA1
b1ee5422b89aa26518fb73d6e0104bb86397329c
-
SHA256
9fcc9d4c9b93665b99a1655fc2945e8a3d58b40cb457117e12dfe87714da6111
-
SHA512
8d22badff2851afaddb9d36e987895e04abfd1c1bed367dd632fd4c756981150070620dcf3aafe4a47a66b24ed78e8b610ca2b61f3b2fecddce6e21371e12965
-
SSDEEP
192:MC81DDT1WFTQUJYYqKKBLaV+j4jG50tiSdezqZ5K1uG:ML1DoFTPaHKK8cYGSti3GG
Malware Config
Signatures
Files
-
9fcc9d4c9b93665b99a1655fc2945e8a3d58b40cb457117e12dfe87714da6111.dll windows x86
2dc6cf2598e0ff96f35be0fe11aef313
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sleep
ExitThread
CreateThread
CreateProcessA
WriteProcessMemory
GetModuleHandleA
ReadProcessMemory
GetSystemDirectoryA
GetProcAddress
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringA
VirtualQuery
GetCurrentProcess
IsDebuggerPresent
VirtualProtect
user32
SetWindowsHookExA
CallNextHookEx
ws2_32
WSAStartup
htons
inet_addr
gethostbyname
connect
send
closesocket
WSACleanup
socket
msvcr90
memset
memcpy
_except_handler4_common
_crt_debugger_hook
sprintf
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ