Static task
static1
Behavioral task
behavioral1
Sample
23bcd2f781297edddd4205c06638da985068ac6fce6e5573cd3f0f6e9365b53f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
23bcd2f781297edddd4205c06638da985068ac6fce6e5573cd3f0f6e9365b53f.exe
Resource
win10v2004-20220812-en
General
-
Target
23bcd2f781297edddd4205c06638da985068ac6fce6e5573cd3f0f6e9365b53f
-
Size
14KB
-
MD5
baefd25324bc965738bddf96e181bffa
-
SHA1
83eec01118942eac88bdfd16c3b169ca70c382ec
-
SHA256
23bcd2f781297edddd4205c06638da985068ac6fce6e5573cd3f0f6e9365b53f
-
SHA512
5a41aefcb5609acee82981783bd881a06b8e64107b8900faff8824813a60fd4bbc7fa0598098b624c753e5244a60dd0dbc49684b0eb225c5272583d0695979d4
-
SSDEEP
192:cTwEyNXMC7oi9W7xdJTEaWygstdt1EixcokQqPo5bdh9VyPRduKDe84Yzj+g:CwT2tdCaWyg+VvxDkQJ5b39cXVa8cg
Malware Config
Signatures
Files
-
23bcd2f781297edddd4205c06638da985068ac6fce6e5573cd3f0f6e9365b53f.exe windows x86
b95178628a07cab4b0056df25a9d15cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
lstrcpyA
CreateThread
lstrcmpA
LeaveCriticalSection
WaitForMultipleObjects
EnterCriticalSection
GetTickCount
CreateEventA
InitializeCriticalSection
lstrcmpiA
ReadFile
SetFilePointer
GetFileSize
Sleep
SetEvent
GetModuleFileNameA
CreateFileA
CloseHandle
GetModuleHandleA
ExitProcess
user32
RegisterClassExA
SetWindowTextA
DefWindowProcA
PostQuitMessage
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
EnableWindow
DefDlgProcA
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
GetMessageA
PeekMessageA
rasapi32
RasEnumEntriesA
RasGetEntryPropertiesA
RasDialA
RasGetErrorStringA
RasEnumDevicesA
RasSetEntryPropertiesA
RasHangUpA
RasEnumConnectionsA
RasGetConnectStatusA
comctl32
ord17
msvcrt
strchr
malloc
atoi
strstr
_strupr
??3@YAXPAX@Z
??2@YAPAXI@Z
free
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ