Static task
static1
Behavioral task
behavioral1
Sample
503d5eb6fa1620117fdd6b16d774231388a1e78c9846b70fda86716803f8256b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
503d5eb6fa1620117fdd6b16d774231388a1e78c9846b70fda86716803f8256b.exe
Resource
win10v2004-20220901-en
General
-
Target
503d5eb6fa1620117fdd6b16d774231388a1e78c9846b70fda86716803f8256b
-
Size
800KB
-
MD5
41b872aa1b1fc5a4e211076729ff3e10
-
SHA1
a6f45acde18e4d25d9f47f83f6f759beb0794ab2
-
SHA256
503d5eb6fa1620117fdd6b16d774231388a1e78c9846b70fda86716803f8256b
-
SHA512
f0608feb6f9bdd32be18b4cbb16e8334a377cc2c09a8748f9cd0fefd239c375eeaa629e3557647de650bfd99b8db0a0629185df4ff3eff85a029c4a41edfccce
-
SSDEEP
24576:a8wk/26uSNWQw6ReN6NgUWrMbR8TYlhoB8:/z/hgF6FNkrMb6El
Malware Config
Signatures
Files
-
503d5eb6fa1620117fdd6b16d774231388a1e78c9846b70fda86716803f8256b.exe windows x86
a7667110f19bb2f398b2918942c27369
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeA
lstrlenA
GetStringTypeW
CreateMutexA
DeleteFileA
CreateEventW
DeviceIoControl
SetLastError
LoadLibraryW
GetPrivateProfileSectionA
HeapFree
HeapDestroy
TlsGetValue
ResumeThread
VirtualProtectEx
GetProcessHeap
GetPrivateProfileIntW
GetCurrentThread
DeviceIoControl
ClearCommBreak
GetFileAttributesA
rasapi32
RasDialA
RasDialA
DwRasUninitialize
RasDeleteEntryA
DwCloneEntry
DwEnumEntryDetails
DwEnumEntryDetails
DwEnumEntryDetails
RasDeleteEntryA
DwCloneEntry
DwRasUninitialize
RasDialA
DwRasUninitialize
pdh
PdhAddCounterA
PdhCloseLog
PdhGetLogFileTypeA
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ