Static task
static1
Behavioral task
behavioral1
Sample
ffd49bcf71cde5138f180ce4b09fd5d2cc22e004194dfabf12b9c0639c8a1f5f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffd49bcf71cde5138f180ce4b09fd5d2cc22e004194dfabf12b9c0639c8a1f5f.dll
Resource
win10v2004-20220901-en
General
-
Target
ffd49bcf71cde5138f180ce4b09fd5d2cc22e004194dfabf12b9c0639c8a1f5f
-
Size
51KB
-
MD5
1e47f1a5d5335756577b9fa6c57398a0
-
SHA1
3d0ca13943f7c3fab12e49171d0a58c53b203151
-
SHA256
ffd49bcf71cde5138f180ce4b09fd5d2cc22e004194dfabf12b9c0639c8a1f5f
-
SHA512
ab12326cf7c280e7b7b09e7d600e2122794fd0d249624d2a6adbe2fd1efa8d6eeda4ebec57c9155f3a15adb9896e6ea938004b9ba0a94f57280c7a7f22c768e3
-
SSDEEP
768:qoRj9UjWOC+is3y2swT+sqqLsPOj/u3OMI1O3JNdOxz3MO3D4O3oOyvWO3t:lRj9eWzBsC2z+6Lsy
Malware Config
Signatures
Files
-
ffd49bcf71cde5138f180ce4b09fd5d2cc22e004194dfabf12b9c0639c8a1f5f.dll windows x86
0036783b5bdde8020f94b35873f4fe29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
Sleep
CloseHandle
CreateProcessA
GetSystemDirectoryA
GetWindowsDirectoryA
GetVersionExA
CreatePipe
WriteFile
ReadFile
PeekNamedPipe
msvcrt
fread
_close
_filelength
_open
fclose
fwrite
fopen
strncmp
atoi
free
_initterm
malloc
_adjust_fdiv
_strlwr
ws2_32
closesocket
connect
inet_addr
htons
setsockopt
socket
WSAStartup
inet_ntoa
gethostbyname
gethostname
send
recv
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rad Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ