Static task
static1
Behavioral task
behavioral1
Sample
177ba4746879c752194aa868330c24ee3e74960ec4a2b1838a839188d4f932e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
177ba4746879c752194aa868330c24ee3e74960ec4a2b1838a839188d4f932e6.exe
Resource
win10v2004-20220812-en
General
-
Target
177ba4746879c752194aa868330c24ee3e74960ec4a2b1838a839188d4f932e6
-
Size
308KB
-
MD5
6e1373628dfe9f300d51754cbea15340
-
SHA1
39fafdb6459d88911e1386e495251c38387c5fb9
-
SHA256
177ba4746879c752194aa868330c24ee3e74960ec4a2b1838a839188d4f932e6
-
SHA512
c412e2065ad837625e4200fc19912483ce84de9e570e3c30aa01591afebd1b6e4b3e4208d32a356a303566d693c1fc9c07cbf47df4ba2f90755ea6e5c5aaf478
-
SSDEEP
6144:Hv91Fit3gBrg0eRzkyIPWPyA2clsf0Wf8ILciJhje:P9q3argfzkyIPWPyAJ29f8Odh
Malware Config
Signatures
Files
-
177ba4746879c752194aa868330c24ee3e74960ec4a2b1838a839188d4f932e6.exe windows x86
0be92025d653207dc2dcf3897ecca473
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
DeleteFileA
GetPrivateProfileIntW
ClearCommBreak
GetCurrentProcess
DeviceIoControl
HeapFree
TlsGetValue
GetProcessHeap
CreateEventW
GetStringTypeA
LoadLibraryW
DeviceIoControl
GetDriveTypeA
lstrlenA
OpenMutexW
ResumeThread
GetFileAttributesA
VirtualProtectEx
HeapDestroy
GetPrivateProfileSectionA
rasapi32
DwCloneEntry
DwCloneEntry
DwRasUninitialize
RasDialA
RasDialA
DwEnumEntryDetails
DwRasUninitialize
DwRasUninitialize
RasDialA
DwEnumEntryDetails
DwEnumEntryDetails
RasDeleteEntryA
RasDeleteEntryA
p2p
PeerPnrpStartup
PeerEnumGroups
PeerGetNextItem
PeerFreeData
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ