ServerMain
Static task
static1
Behavioral task
behavioral1
Sample
fb3f67a4f6cdecb9959bc868ec8c549c3260da60524878cfb3e15ce6e3d99895.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fb3f67a4f6cdecb9959bc868ec8c549c3260da60524878cfb3e15ce6e3d99895.dll
Resource
win10v2004-20220901-en
General
-
Target
fb3f67a4f6cdecb9959bc868ec8c549c3260da60524878cfb3e15ce6e3d99895
-
Size
13KB
-
MD5
22720c24049858d60e8ba0e38e317680
-
SHA1
359e507ea16fc6dd1451327fdab7788f7debc2fb
-
SHA256
fb3f67a4f6cdecb9959bc868ec8c549c3260da60524878cfb3e15ce6e3d99895
-
SHA512
f1ffd266e27ab629be495f2ee1e24ddddd96acd954a68eb00334b647a3b6a120435e5ffc7b78b22d9df15d6ef08ec2744a9a54cb869de0ea3b092083ae350393
-
SSDEEP
192:zqD0GY9E4y1EiWDUcCk1BFisjQ/kKnWE0bcZyL:zwqEd24k1ziKunWEby
Malware Config
Signatures
Files
-
fb3f67a4f6cdecb9959bc868ec8c549c3260da60524878cfb3e15ce6e3d99895.dll windows x86
5a55803254806edfeddb9a378de54549
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
malloc
_initterm
free
sprintf
strncpy
strstr
memset
_strrev
_stricmp
memcpy
strcmp
strcpy
_access
kernel32
GetCommandLineA
OpenProcess
TerminateProcess
DeleteFileA
GetTempFileNameA
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryA
GetProcAddress
FreeLibrary
CopyFileA
GetFileAttributesA
Sleep
lstrlenA
GetDriveTypeA
CloseHandle
CreateThread
ExitProcess
GetLastError
CreateMutexA
dbghelp
SearchTreeForFile
ws2_32
WSACleanup
socket
htons
htonl
bind
recvfrom
WSAStartup
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ