Static task
static1
Behavioral task
behavioral1
Sample
1b9475691ec7093834b247ac6c24acd6679e39cd4a6e2529058bd2266c0df5af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b9475691ec7093834b247ac6c24acd6679e39cd4a6e2529058bd2266c0df5af.exe
Resource
win10v2004-20220812-en
General
-
Target
1b9475691ec7093834b247ac6c24acd6679e39cd4a6e2529058bd2266c0df5af
-
Size
269KB
-
MD5
43a6197b3e0c3083aa2a484e8c6b7a40
-
SHA1
f1fd25174a6fc42a4081afabdaee23496fbfc18c
-
SHA256
1b9475691ec7093834b247ac6c24acd6679e39cd4a6e2529058bd2266c0df5af
-
SHA512
9c65cd6d4198d31eeac521f73b49463db32c7551882160b47e8495f7b224095e137b1f461caff397c22996ceae5830aaa4ec1c0401b8094fd0964e28ac87f337
-
SSDEEP
6144:P73AZTgRn9aWIIiEpJMqTh7dVJ1pvtm99iWEU:P7KkygPhRVJ1Pmv4U
Malware Config
Signatures
Files
-
1b9475691ec7093834b247ac6c24acd6679e39cd4a6e2529058bd2266c0df5af.exe windows x86
03eb9c8a00fa7d3ff8d4746d38020a75
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hnetcfg
HNetGetFirewallSettingsPage
HNetFreeSharingServicesPage
HNetSharedAccessSettingsDlg
HNetDeleteRasConnection
HNetGetSharingServicesPage
HNetSharingAndFirewallSettingsDlg
kernel32
FindFirstFileW
GetModuleHandleA
LocalAlloc
GetEnvironmentStringsA
GetFileType
DeleteFileA
GetStartupInfoA
GetLocalTime
FindNextFileW
GetStdHandle
ReadFile
ResetEvent
GetFileAttributesW
CloseHandle
GetDateFormatW
SetFilePointer
GetLocaleInfoW
LocalFree
FreeLibrary
ResetWriteWatch
RequestDeviceWakeup
LoadLibraryW
CreateFileW
GlobalAlloc
FormatMessageW
GetTimeFormatW
WriteConsoleW
MultiByteToWideChar
RequestWakeupLatency
GetCommandLineW
SetLastError
VerifyVersionInfoW
GetSystemDefaultLCID
iyuv_32
AboutDialogProc
DriverDialogProc
DllMain
DriverProc
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ