Static task
static1
Behavioral task
behavioral1
Sample
281cc0e568dfa729353fbdc5a2244f2bb047f032b36ca2c4d537734c3d769a30.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
281cc0e568dfa729353fbdc5a2244f2bb047f032b36ca2c4d537734c3d769a30.exe
Resource
win10v2004-20220812-en
General
-
Target
281cc0e568dfa729353fbdc5a2244f2bb047f032b36ca2c4d537734c3d769a30
-
Size
800KB
-
MD5
61cdf109e60b0d896a65c18b7d295720
-
SHA1
711d2692f95b16844614e872f392561142f18b41
-
SHA256
281cc0e568dfa729353fbdc5a2244f2bb047f032b36ca2c4d537734c3d769a30
-
SHA512
028d240d479bf8102692dfa07109bc003f2f97f0b4e4a5146179e26fb4190b5863b6e5eca10347e1b58578ba7976258b917656534c0b83e595845c9c081e26af
-
SSDEEP
12288:8o4sr59KsHv6GS+XOq/gSS1Ab1dHsYvKretqE5APHOG8dRjki5YSW3zSi:V4sresP6GSEj4SMe6EKPz8dRgg+
Malware Config
Signatures
Files
-
281cc0e568dfa729353fbdc5a2244f2bb047f032b36ca2c4d537734c3d769a30.exe windows x86
6524b4ccbe0a187e4f0f478b49d48d06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
OpenMutexW
lstrlenA
GetFileAttributesA
GetCurrentThread
ResumeThread
TlsGetValue
CreateEventW
SetLastError
VirtualProtectEx
GetPrivateProfileIntW
DeleteFileA
GetStringTypeA
GetPrivateProfileSectionA
GetDriveTypeA
DeviceIoControl
ClearCommBreak
LoadLibraryW
HeapFree
GetProcessHeap
DeviceIoControl
rasapi32
DwRasUninitialize
DwCloneEntry
RasDialA
DwEnumEntryDetails
RasDialA
RasDeleteEntryA
RasDialA
DwRasUninitialize
DwCloneEntry
DwEnumEntryDetails
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize
pdh
PdhGetLogFileTypeA
PdhCloseLog
PdhGetLogFileSize
PdhAddCounterA
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ