ServerMain
Static task
static1
Behavioral task
behavioral1
Sample
aa796fe5feded87a96987496be07e393f448b8ad109604e53f2aee54fab3041c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aa796fe5feded87a96987496be07e393f448b8ad109604e53f2aee54fab3041c.dll
Resource
win10v2004-20221111-en
General
-
Target
aa796fe5feded87a96987496be07e393f448b8ad109604e53f2aee54fab3041c
-
Size
13KB
-
MD5
ed4c059999187ef1fbbc89821db751f7
-
SHA1
0fd457b6da0a34e9c55cdf1773d93cf6bb2020b9
-
SHA256
aa796fe5feded87a96987496be07e393f448b8ad109604e53f2aee54fab3041c
-
SHA512
ad945695bac1a38221e8651637d9f841305f63d52347d46dcf26727e0a115a03992ce32c27d0081a9d15ae519eac4720a9904df9a35f7270d1a7082768bc48c5
-
SSDEEP
192:wD0GY9E4y1EiWDUcCk1BFisjQ/kKnWE0UZyL:qqEd24k1ziKunWEry
Malware Config
Signatures
Files
-
aa796fe5feded87a96987496be07e393f448b8ad109604e53f2aee54fab3041c.dll windows x86
5a55803254806edfeddb9a378de54549
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
sprintf
strncpy
strstr
memset
_strrev
_stricmp
memcpy
strcmp
strcpy
_access
kernel32
GetCommandLineA
OpenProcess
TerminateProcess
DeleteFileA
GetTempFileNameA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
FreeLibrary
CopyFileA
GetFileAttributesA
Sleep
lstrlenA
GetDriveTypeA
CloseHandle
CreateThread
ExitProcess
GetLastError
CreateMutexA
dbghelp
SearchTreeForFile
ws2_32
WSACleanup
socket
htons
htonl
bind
recvfrom
WSAStartup
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ