ServerMain
Static task
static1
Behavioral task
behavioral1
Sample
aa236a7b3155302e4872d5ffeb493065fa8f095faaddc4c4aefe88f6bcd64956.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa236a7b3155302e4872d5ffeb493065fa8f095faaddc4c4aefe88f6bcd64956.dll
Resource
win10v2004-20220812-en
General
-
Target
aa236a7b3155302e4872d5ffeb493065fa8f095faaddc4c4aefe88f6bcd64956
-
Size
13KB
-
MD5
ca2efd6190857f40304d2ee2719b0b50
-
SHA1
4c681ccc95ca4d39568bb517f490bb1a026bd541
-
SHA256
aa236a7b3155302e4872d5ffeb493065fa8f095faaddc4c4aefe88f6bcd64956
-
SHA512
c07bd42ec8cf36b30e1f216a1c6b57e05e1f3c890e3abdac1a06f987a6327b50e84f459dccb4c351a91c22339a2efaacbf167f502b9c1c04c734a3a4703df2c9
-
SSDEEP
192:5D0GY9E4y1EiWDUcCk1BFisjQ/kKnWE0UZyL:nqEd24k1ziKunWEry
Malware Config
Signatures
Files
-
aa236a7b3155302e4872d5ffeb493065fa8f095faaddc4c4aefe88f6bcd64956.dll windows x86
5a55803254806edfeddb9a378de54549
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
sprintf
strncpy
strstr
memset
_strrev
_stricmp
memcpy
strcmp
strcpy
_access
kernel32
GetCommandLineA
OpenProcess
TerminateProcess
DeleteFileA
GetTempFileNameA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
FreeLibrary
CopyFileA
GetFileAttributesA
Sleep
lstrlenA
GetDriveTypeA
CloseHandle
CreateThread
ExitProcess
GetLastError
CreateMutexA
dbghelp
SearchTreeForFile
ws2_32
WSACleanup
socket
htons
htonl
bind
recvfrom
WSAStartup
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ