Static task
static1
Behavioral task
behavioral1
Sample
4c521e21dbb6fb0f892bb53d063eef80556ff31e74a931ae02632948b9198132.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c521e21dbb6fb0f892bb53d063eef80556ff31e74a931ae02632948b9198132.exe
Resource
win10v2004-20220812-en
General
-
Target
4c521e21dbb6fb0f892bb53d063eef80556ff31e74a931ae02632948b9198132
-
Size
129KB
-
MD5
7a4c7ea5ec1e55693a5d2507d7387eb0
-
SHA1
009215a48e105dfa8041e13762e0de642093b742
-
SHA256
4c521e21dbb6fb0f892bb53d063eef80556ff31e74a931ae02632948b9198132
-
SHA512
433a3adbd8dee69acba4b56b1c01536960e6cecf1105ee21fe4348848a6f98f43b5b30ad7e04f192a6425bb8efe92b09fc1abad22a105ddfe5bf35e2002b903d
-
SSDEEP
1536:BotDwJRLp0SzZWKOFSO26k0DvludBkMbRvd/K8tUDTdY2esMkoHAuSwe9SfjU0Cr:BoOyFf2hwu7pFd3tUDx7Ey9SLotdis
Malware Config
Signatures
Files
-
4c521e21dbb6fb0f892bb53d063eef80556ff31e74a931ae02632948b9198132.exe windows x86
7a3a0fcd8b4a56ee7f3ff6089d4b7c28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
ClearCommBreak
CreateEventW
DeviceIoControl
HeapDestroy
lstrlenA
DeleteFileA
ResumeThread
HeapFree
LoadLibraryW
GetDriveTypeA
SetLastError
VirtualProtectEx
OpenMutexW
GetPrivateProfileIntW
GetFileAttributesA
DeviceIoControl
GetProcessHeap
GetPrivateProfileSectionA
GetCurrentThread
GetStringTypeW
rasapi32
RasDialA
RasDialA
DwCloneEntry
RasDeleteEntryA
DwEnumEntryDetails
DwCloneEntry
DwEnumEntryDetails
DwEnumEntryDetails
RasDialA
RasDeleteEntryA
DwRasUninitialize
DwRasUninitialize
DwRasUninitialize
pdh
PdhGetLogFileTypeA
PdhAddCounterA
PdhCloseLog
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ