Static task
static1
Behavioral task
behavioral1
Sample
9ed27344f62052f28360efc2093f8412f797cd93911863870c8cd7b6a17e2200.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ed27344f62052f28360efc2093f8412f797cd93911863870c8cd7b6a17e2200.exe
Resource
win10v2004-20220812-en
General
-
Target
9ed27344f62052f28360efc2093f8412f797cd93911863870c8cd7b6a17e2200
-
Size
292KB
-
MD5
4e8b1c02b36eeb519d12897d13e9d5c0
-
SHA1
0b468a2df896f3e299c08063f8bfc07baa6d75d3
-
SHA256
9ed27344f62052f28360efc2093f8412f797cd93911863870c8cd7b6a17e2200
-
SHA512
2f0d7eca42f988b75cd04378d929d9a4115a9a19b7de04d15ce023539c1682f31607b6edea1ac04bffd1a650f2a19638c0c28c76b3a8d150b4d9c4a22f5c9ad3
-
SSDEEP
6144:JYbMaVaHVcfPgeSJPW207s40JG2QObLN5x:JY3Va1cnge/22he1hn
Malware Config
Signatures
Files
-
9ed27344f62052f28360efc2093f8412f797cd93911863870c8cd7b6a17e2200.exe windows x86
05bc8f3b92f85434b08f9283fb39defd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasEnumConnectionsW
RasHangUpW
RasGetConnectStatusW
kernel32
TlsGetValue
SetEnvironmentVariableA
CompareStringW
CompareStringA
FindFirstChangeNotificationW
SetTapeParameters
FindNextChangeNotification
VirtualProtect
SetFileAttributesA
GetLastError
GetFileAttributesA
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
CloseHandle
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
CreateFileA
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
Sleep
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
ReadFile
GetCPInfo
InitializeCriticalSection
HeapSize
LoadLibraryA
GetACP
GetOEMCP
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Sections
.text Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ