Static task
static1
Behavioral task
behavioral1
Sample
c82a47b4626d7e5f51e45baf39e80b7e9113248efb0408e0ae38c4471c300bd5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c82a47b4626d7e5f51e45baf39e80b7e9113248efb0408e0ae38c4471c300bd5.exe
Resource
win10v2004-20220901-en
General
-
Target
c82a47b4626d7e5f51e45baf39e80b7e9113248efb0408e0ae38c4471c300bd5
-
Size
307KB
-
MD5
579576fea2976ebad30b71d78bef04b0
-
SHA1
7a5f38052c89d1091db60fd13e7c771f6813dfa0
-
SHA256
c82a47b4626d7e5f51e45baf39e80b7e9113248efb0408e0ae38c4471c300bd5
-
SHA512
9a3bb9676f6e475b1a68e5ef5d72f99954f9b15616227967de645e2e18865211871c2d9590f36f333caa7026acc7ca200a0c3922fb95603d69ea9703ecebfd29
-
SSDEEP
6144:O691FsgBxH0BTfXj+Bcy0zURUHqW57Cs8O0gb745s61:O69BwB6cJU6h5B8Zgb745Z
Malware Config
Signatures
Files
-
c82a47b4626d7e5f51e45baf39e80b7e9113248efb0408e0ae38c4471c300bd5.exe windows x86
053215cfc97bb1edd204700c3ad96adc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
TlsGetValue
ResumeThread
VirtualProtectEx
lstrlenA
DeviceIoControl
OpenMutexW
GetCurrentThread
GetFileAttributesA
CreateEventW
ClearCommBreak
GetPrivateProfileSectionA
HeapFree
GetPrivateProfileIntW
GetDriveTypeA
GetProcessHeap
LoadLibraryW
SetLastError
DeviceIoControl
DeleteFileA
GetStringTypeW
rasapi32
DwEnumEntryDetails
RasDeleteEntryA
DwCloneEntry
DwRasUninitialize
DwEnumEntryDetails
DwCloneEntry
RasDialA
RasDialA
DwEnumEntryDetails
DwRasUninitialize
RasDeleteEntryA
DwRasUninitialize
RasDialA
pdh
PdhAddCounterA
PdhCloseLog
PdhGetLogFileTypeA
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ