sabho
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Bulz.574410.24205.3908.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Bulz.574410.24205.3908.dll
Resource
win10v2004-20221111-en
General
-
Target
SecuriteInfo.com.Variant.Bulz.574410.24205.3908.dll
-
Size
23KB
-
MD5
6900210069871f6a6dc03f3146cf6549
-
SHA1
17d17067006d7aefb6245cf0ec99762ca6692b93
-
SHA256
c669c2e395b395976d3130efd161441a2b5d7fd5576aacb75773cad6297c9575
-
SHA512
69064ea921e651d77d181e26932871176b37c810e8dced2fa3e8dfb832c2c3009c27e07b82eac0452c70695681a3fb37f2ed31862ace6b7cdc13e302139d5407
-
SSDEEP
384:5T7LMIEA8mwqdaINyGetKM4LwA6ggyduJP20nWmvLO9+dULDDU:9fjx8mDJttXnVBW2eWSLO8dUL
Malware Config
Signatures
Files
-
SecuriteInfo.com.Variant.Bulz.574410.24205.3908.dll.dll windows x86
23f09bf1148cedbe722cd39e9aebd43b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
WSAGetServiceClassNameByClassIdA
WSAAsyncGetHostByAddr
WSANtohl
WSCEnumProtocols
WSADuplicateSocketW
WSAAddressToStringW
WSAAsyncGetServByName
loadperf
UnloadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
msi
ord163
ord123
ord104
ord136
ord25
ord111
shell32
ShellExecuteExA
SHChangeNotify
SHEmptyRecycleBinW
urlmon
URLOpenStreamW
CoInternetGetSession
IsAsyncMoniker
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 661B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ