Static task
static1
Behavioral task
behavioral1
Sample
e1646477c1933e163cd28fcc30f215ce2a6a04022e3ae00f14d0d1f142e46a87.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1646477c1933e163cd28fcc30f215ce2a6a04022e3ae00f14d0d1f142e46a87.dll
Resource
win10v2004-20220812-en
General
-
Target
e1646477c1933e163cd28fcc30f215ce2a6a04022e3ae00f14d0d1f142e46a87
-
Size
14KB
-
MD5
1b69d3b2cb70170b0c7635cbb991f34f
-
SHA1
5000875fc4f28ca154664664a82302d33b4858ed
-
SHA256
e1646477c1933e163cd28fcc30f215ce2a6a04022e3ae00f14d0d1f142e46a87
-
SHA512
2f226d1f2a5e3388a3aa400ce6b7feb309f6438a8ca3d9e90c87c2d988ddd10aee09c688e7241b4de76e26cb93009f0eced323fd313f7b279ff9313a0b6c3b4e
-
SSDEEP
192:0C5VoIj7fHahOPi6kNwBmzFgB451SAU69jSSDCweG/qHBTYCFZ9LQ:p5NH6/NwBmxQn6XDCo/qhcCz9U
Malware Config
Signatures
Files
-
e1646477c1933e163cd28fcc30f215ce2a6a04022e3ae00f14d0d1f142e46a87.dll windows x86
09e2e7d1a40ced54ad52d9b136879925
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
setsockopt
WSACleanup
inet_addr
accept
listen
bind
gethostbyname
htons
WSAStartup
socket
connect
closesocket
select
__WSAFDIsSet
recv
send
avicap32
capCreateCaptureWindowA
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
kernel32
GetTickCount
CreateThread
GetWindowsDirectoryA
WinExec
lstrcmpA
GetCurrentDirectoryA
CreateDirectoryA
RemoveDirectoryA
CopyFileA
SetFileAttributesA
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GlobalFree
Sleep
lstrcpyA
lstrlenA
GetLogicalDriveStringsA
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
DeleteFileA
user32
CreateWindowExA
SendMessageA
DestroyWindow
PostQuitMessage
DefWindowProcA
RegisterClassA
IsWindow
gdi32
GetDeviceCaps
CreateCompatibleDC
DeleteDC
CreateDIBSection
CreateDCA
BitBlt
GetDIBColorTable
DeleteObject
SelectObject
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ