Static task
static1
Behavioral task
behavioral1
Sample
949ad1dbe8d8750935e6edb227368ba708e9385792c6e2ff7242d7dac23d96be.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
949ad1dbe8d8750935e6edb227368ba708e9385792c6e2ff7242d7dac23d96be.dll
Resource
win10v2004-20221111-en
General
-
Target
949ad1dbe8d8750935e6edb227368ba708e9385792c6e2ff7242d7dac23d96be
-
Size
52KB
-
MD5
e0cdf0f6ded1ccd45991d38d78ae7297
-
SHA1
3801914cd5c7d27d860ae4f10e1b2cc02d6a0062
-
SHA256
949ad1dbe8d8750935e6edb227368ba708e9385792c6e2ff7242d7dac23d96be
-
SHA512
9119401e2d0e68bfe1345e2ec99d22d41008b2458a1cf66e03e93ff2910201bcc38004667a5b3685d541ab9ddb0f14d4059f0763a0056efae3a2f68f684764bf
-
SSDEEP
1536:1LDUWFkmR0WOfEOoxQfbMtyvJDhO/PSjAbOtJ6:10aRlKE1QfbUyvJDhO/qsO6
Malware Config
Signatures
Files
-
949ad1dbe8d8750935e6edb227368ba708e9385792c6e2ff7242d7dac23d96be.dll windows x86
5385761c70d2ac9a43f192523508cab8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
UnhookWindowsHookEx
ole32
CLSIDFromString
oleaut32
SysFreeString
msvcrt
malloc
netapi32
Netbios
wsock32
recv
Sections
.text Size: 47KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE