Static task
static1
Behavioral task
behavioral1
Sample
dc79e9dc33d9fe3afbfccbc417daa60f766e4f2e9d104e48e3be0f1865afe7e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc79e9dc33d9fe3afbfccbc417daa60f766e4f2e9d104e48e3be0f1865afe7e6.exe
Resource
win10v2004-20220812-en
General
-
Target
dc79e9dc33d9fe3afbfccbc417daa60f766e4f2e9d104e48e3be0f1865afe7e6
-
Size
134KB
-
MD5
6a261688aa8a25d1152f3adcda264cb0
-
SHA1
67fb91c271cd5cfd2b6367c42dda68a40598d355
-
SHA256
dc79e9dc33d9fe3afbfccbc417daa60f766e4f2e9d104e48e3be0f1865afe7e6
-
SHA512
3f292cc7f048fa708b8675c4b6db553580e234399a8cc06630b4f21dc7b7ccf6e302163bc16ba2199e1798e2be528653b793886032533eba76bf25a3dd90cc6f
-
SSDEEP
3072:ZK74xtthKvjwcGojnIKI/IQ6+JTKbeBZCYI724:c2XKr3iKy6+JTKbclI
Malware Config
Signatures
Files
-
dc79e9dc33d9fe3afbfccbc417daa60f766e4f2e9d104e48e3be0f1865afe7e6.exe windows x86
8ea247212ab6979c18a527e718dc6a32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ClearCommBreak
CreateMutexA
GetPrivateProfileIntW
DeviceIoControl
HeapDestroy
GetFileAttributesW
LoadLibraryW
CreateEventW
DeleteFileA
ResumeThread
HeapFree
GetProcessHeap
lstrlenA
VirtualProtectEx
GetPrivateProfileSectionA
GetStringTypeW
TlsGetValue
GetCurrentThread
GetDriveTypeA
SetLastError
DeviceIoControl
rasapi32
DwCloneEntry
DwRasUninitialize
RasDialA
DwCloneEntry
RasDeleteEntryA
DwEnumEntryDetails
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize
DwEnumEntryDetails
DwRasUninitialize
RasDialA
RasDialA
pdh
PdhGetLogFileTypeA
PdhCloseLog
PdhGetLogFileSize
PdhAddCounterA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ