Static task
static1
Behavioral task
behavioral1
Sample
97f055803b32a1da89af73399c808458c15a5e986edf511ad91e567f15003fa5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97f055803b32a1da89af73399c808458c15a5e986edf511ad91e567f15003fa5.exe
Resource
win10v2004-20220812-en
General
-
Target
97f055803b32a1da89af73399c808458c15a5e986edf511ad91e567f15003fa5
-
Size
134KB
-
MD5
7306095cff67e33251e6658329be1df0
-
SHA1
5f61b58c2cd77e55b2d742785074e30db9133272
-
SHA256
97f055803b32a1da89af73399c808458c15a5e986edf511ad91e567f15003fa5
-
SHA512
762913560cc7914cfb5b4d8bc08d200a253d952706eab723925e993df8975541e83b875d8effa1ad2ecbeb9c417ab9e216bb5ec4d86af417bb6d934289b2ee28
-
SSDEEP
3072:bU89WLQnEE9zmimMfx2d4i/C+Wi7E1eugjyB3zjYRBP1X:bBM8nE0zmilfAdTWi77ho34RBP
Malware Config
Signatures
Files
-
97f055803b32a1da89af73399c808458c15a5e986edf511ad91e567f15003fa5.exe windows x86
c66bcd13bf2226ca7e85e0c92876a5c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
GetCurrentProcess
CreateEventW
DeleteFileA
lstrlenA
ResumeThread
HeapFree
GetPrivateProfileIntW
OpenMutexW
LoadLibraryW
TlsGetValue
ClearCommBreak
DeviceIoControl
GetDriveTypeA
GetStringTypeA
VirtualProtectEx
GetProcessHeap
SetLastError
GetFileAttributesA
HeapDestroy
DeviceIoControl
rasapi32
DwRasUninitialize
DwEnumEntryDetails
RasDialA
DwCloneEntry
DwEnumEntryDetails
DwCloneEntry
RasDialA
RasDeleteEntryA
RasDialA
DwRasUninitialize
DwEnumEntryDetails
DwRasUninitialize
RasDeleteEntryA
p2p
PeerEnumGroups
PeerFreeData
PeerGetNextItem
PeerPnrpStartup
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ