Static task
static1
Behavioral task
behavioral1
Sample
a24262466972c667c03897c77c9d8f0a55afd98518b2cfdeeeef5cf0f6f5807b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a24262466972c667c03897c77c9d8f0a55afd98518b2cfdeeeef5cf0f6f5807b.exe
Resource
win10v2004-20220901-en
General
-
Target
a24262466972c667c03897c77c9d8f0a55afd98518b2cfdeeeef5cf0f6f5807b
-
Size
212KB
-
MD5
6f33aa27f1806fff9cc4a75d5ae998d0
-
SHA1
abcb9e544bcb02046f357327d45f2d4d0440671d
-
SHA256
a24262466972c667c03897c77c9d8f0a55afd98518b2cfdeeeef5cf0f6f5807b
-
SHA512
cb09672f0d19e9c42dc5fc2364ad0dbaa2c8c22ea65326b1fe82bb4eb7be68751879a5e0a9932a674cd63339862a4b73166f2e921d2eefc5333460a80c350b5c
-
SSDEEP
6144:0JkN1GtzY7W62WzDzyoqoGqanA99lmEbvRkiV5NwOh:0ON1Gt8S6xDeoGqdYdiyG
Malware Config
Signatures
Files
-
a24262466972c667c03897c77c9d8f0a55afd98518b2cfdeeeef5cf0f6f5807b.exe windows x86
dbb027b72ad9108ef707d6fbd7c7452d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
raschap
RasEapGetInfo
RasCpEnumProtocolIds
RasCpGetInfo
kernel32
FreeResource
GetOEMCP
GetLocaleInfoW
lstrlenA
QueryPerformanceCounter
GetCurrentProcess
MultiByteToWideChar
GetCurrentProcessId
FindResourceA
GetProcessHeap
WideCharToMultiByte
GetTickCount
LockResource
CreateFileA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
LoadResource
GetVolumeInformationA
SetUnhandledExceptionFilter
HeapFree
lstrcmpA
CloseHandle
lstrcpyA
QueryDosDeviceA
HeapAlloc
SystemTimeToFileTime
DeviceIoControl
LoadLibraryW
SetLastError
GetLocalTime
advapi32
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
rasapi32
RasValidateEntryNameA
DwCloneEntry
RasValidateEntryNameW
RasSetSubEntryPropertiesW
rasman
RasActivateRouteEx
IsRasmanProcess
RasAddConnectionPort
RasAllocateRoute
RasAddNotification
rasctrs
CollectRasPerformanceData
CloseRasPerformanceData
OpenRasPerformanceData
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 22KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ