Static task
static1
Behavioral task
behavioral1
Sample
9d833c2a2b4a987c0a45b38c76bde20a26bccecad64b8f35bc62503ed1dafbb8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d833c2a2b4a987c0a45b38c76bde20a26bccecad64b8f35bc62503ed1dafbb8.exe
Resource
win10v2004-20220812-en
General
-
Target
9d833c2a2b4a987c0a45b38c76bde20a26bccecad64b8f35bc62503ed1dafbb8
-
Size
61KB
-
MD5
6303ce88e78a81fe0227a9c18e336971
-
SHA1
e5d80d9f69d03fac14ca4872d15a9d0b9f84df09
-
SHA256
9d833c2a2b4a987c0a45b38c76bde20a26bccecad64b8f35bc62503ed1dafbb8
-
SHA512
4901297ab1af8af3d1ed99ca912e64f0b5a6f6dbb38d8f72df0291e054414a4d12522e50d8f0180c099875d07c947a4736fb1cd865048968f3b07cb5b980ba56
-
SSDEEP
1536:I8HYuXqGj14HnBld6qU79NEHH4X/VwhI32Zw:I84ot4HBz6V79N9PmW
Malware Config
Signatures
Files
-
9d833c2a2b4a987c0a45b38c76bde20a26bccecad64b8f35bc62503ed1dafbb8.exe windows x86
a285e7b9a2a8afaaf5e5e31a996f6a94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rasman
RasPortListen
RasDeviceGetInfo
RasGetDeviceConfigInfo
RasPortGetFramingEx
RasPortEnum
RasDoIke
RasPortSend
RasFreeBuffer
RasFindPrerequisiteEntry
RasPortSetInfo
RasRpcDeleteEntry
RasAddConnectionPort
RasRpcRemoteSetUserPreferences
RasCompressionSetInfo
RasDeviceEnum
RasPortReceiveEx
RasGetHportFromConnection
RasPortBundle
RasStartRasAutoIfRequired
RasPortGetProtocolCompression
RasDeAllocateRoute
RasGetNdiswanDriverCaps
RasServerPortClose
kernel32
SetVolumeLabelA
SetConsoleCursorPosition
GetConsoleKeyboardLayoutNameW
SearchPathA
GetFileSize
DebugBreak
TermsrvAppInstallMode
lstrcmpi
PrivCopyFileExW
FindFirstChangeNotificationW
GetModuleHandleW
RegisterWaitForSingleObject
ReadProcessMemory
EnterCriticalSection
SetProcessWorkingSetSize
InterlockedExchange
FindFirstFileExA
SetConsoleCursorInfo
SetTapeParameters
GetConsoleCommandHistoryLengthA
SetPriorityClass
GetVersionExA
BeginUpdateResourceW
InterlockedExchangeAdd
SetCalendarInfoW
SetEvent
SetConsoleWindowInfo
GlobalFindAtomA
GetStartupInfoA
HeapCreate
InitializeSListHead
GetNamedPipeInfo
GetQueuedCompletionStatus
AddRefActCtx
GetProfileStringW
GetConsoleCommandHistoryW
WriteConsoleW
GetConsoleAliasExesA
RegisterWaitForInputIdle
LockResource
GetPrivateProfileStructA
_hwrite
RegisterWaitForSingleObjectEx
GetGeoInfoA
GetDiskFreeSpaceExW
SetConsoleNumberOfCommandsW
SetConsoleCursorMode
OpenFileMappingA
FindNextFileW
IsBadHugeReadPtr
WTSGetActiveConsoleSessionId
VirtualAlloc
GetCommandLineA
SetProcessPriorityBoost
SetCommMask
OpenThread
ResetWriteWatch
OpenFile
GetConsoleAliasA
WaitForMultipleObjectsEx
SetVolumeMountPointW
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
RtlFillMemory
FindAtomW
_lwrite
MoveFileA
OpenWaitableTimerW
BackupWrite
GetCompressedFileSizeW
GetModuleHandleExW
crtdll
??2@YAPAXI@Z
_statusfp
exp
isxdigit
_heapchk
_wcsnicmp
fclose
_swab
tmpfile
_osminor_dll
strcspn
_ismbcspace
_sopen
bsearch
_fstat
_eof
vfwprintf
_mbstok
atexit
_yn
div
mblen
_open_osfhandle
fflush
msvcp60
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??_D?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?sin@?$_Ctr@N@std@@SANN@Z
?grouping@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?pow@?$_Ctr@O@std@@SAOOO@Z
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sqrt@?$_Ctr@O@std@@SAOO@Z
??1out_of_range@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_F_Timevec@std@@QAEXXZ
??4?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
?ldexp@?$_Ctr@N@std@@SANNH@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?epsilon@?$numeric_limits@J@std@@SAJXZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEGG@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
ole32
HICON_UserMarshal
CoCreateInstanceEx
ReleaseStgMedium
HENHMETAFILE_UserFree
CoCreateFreeThreadedMarshaler
SNB_UserSize
HPALETTE_UserMarshal
OleDoAutoConvert
OleRun
CoGetStdMarshalEx
HGLOBAL_UserSize
OleCreateLinkEx
HDC_UserUnmarshal
HBRUSH_UserSize
ProgIDFromCLSID
PropStgNameToFmtId
OleCreateDefaultHandler
DllRegisterServer
OleRegGetUserType
HBITMAP_UserSize
HMETAFILE_UserSize
OpenOrCreateStream
StgCreateDocfileOnILockBytes
FreePropVariantArray
OleRegEnumFormatEtc
CoCreateGuid
CLSIDFromString
PropSysFreeString
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ