Static task
static1
Behavioral task
behavioral1
Sample
49dbd344cba25180fb3491f6af1344172846ee02e72486efba5e55b80b0c5a40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49dbd344cba25180fb3491f6af1344172846ee02e72486efba5e55b80b0c5a40.exe
Resource
win10v2004-20220901-en
General
-
Target
49dbd344cba25180fb3491f6af1344172846ee02e72486efba5e55b80b0c5a40
-
Size
211KB
-
MD5
5691511878342032ec78ece5adb7b79c
-
SHA1
3a762b517919b8fb264a0234e931017cef1437a9
-
SHA256
49dbd344cba25180fb3491f6af1344172846ee02e72486efba5e55b80b0c5a40
-
SHA512
347e045ead3c7b4d93dda1aa04699369a3d582c222e7b5a0f6c7c524953061a8fd007dd1ea2940ed8d2c647528339728bb8b43adac67e82ad69b16646a0a54de
-
SSDEEP
3072:wfScor+JLpBm4J0hZZ2GBUUlSIQsXb2kjfz9rso0m2afyugqFCCbZSuUtsooqI3n:A7UDh5zQsXbhlA9mDyd3LuUCooT2UkjS
Malware Config
Signatures
Files
-
49dbd344cba25180fb3491f6af1344172846ee02e72486efba5e55b80b0c5a40.exe windows x86
93813980d0c152322cfe4fcf026392ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rasdlg
RouterEntryDlgW
GetRasDialOutProtocols
RasSrvAddPropPages
RasAutodialQueryDlgA
RasSrvInitializeService
RasEntryDlgA
RasPhonebookDlgW
RasSrvAllowConnectionsConfig
RasUserPrefsDlg
RasSrvIsConnectionConnected
RasSrvHangupConnection
RasUserEnableManualDial
RasAutodialQueryDlgW
RasDialDlgW
RasEntryDlgW
RasDialDlgA
RasSrvEnumConnections
RasSrvIsServiceRunning
RasUserGetManualDial
RasPhonebookDlgA
DwTerminalDlg
RasSrvCleanupService
RouterEntryDlgA
kernel32
MultiByteToWideChar
WideCharToMultiByte
LockResource
GetEnvironmentStringsW
FindResourceA
lstrcpyA
CreateFileA
LoadLibraryW
lstrcmpA
GetLocaleInfoW
HeapFree
GetSystemTimeAsFileTime
FreeResource
SystemTimeToFileTime
QueryDosDeviceA
LoadResource
GetVolumeInformationA
CloseHandle
HeapAlloc
GetSystemDefaultLCID
GetLocalTime
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcessId
lstrlenA
QueryPerformanceCounter
DeviceIoControl
GetTickCount
GetUserDefaultLCID
GetOEMCP
GetProcessHeap
GetCurrentProcess
advapi32
RegOpenKeyExA
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegQueryValueExA
rasctrs
CollectRasPerformanceData
OpenRasPerformanceData
CloseRasPerformanceData
raschap
RasCpEnumProtocolIds
RasCpGetInfo
RasEapGetInfo
rasapi32
RasValidateEntryNameA
RasSetSubEntryPropertiesW
DwCloneEntry
RasValidateEntryNameW
rasman
IsRasmanProcess
RasActivateRouteEx
RasAddConnectionPort
RasAddNotification
RasAllocateRoute
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 18KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ