Static task
static1
Behavioral task
behavioral1
Sample
97754b8e233c05242dce596f45ad984cf500019ec0f28e43cf65725c50eafac2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97754b8e233c05242dce596f45ad984cf500019ec0f28e43cf65725c50eafac2.exe
Resource
win10v2004-20220812-en
General
-
Target
97754b8e233c05242dce596f45ad984cf500019ec0f28e43cf65725c50eafac2
-
Size
123KB
-
MD5
7c818c4b527cb5cfae1acac276794fd0
-
SHA1
a0c6f489facab74f8ce4a4899e5265233007695b
-
SHA256
97754b8e233c05242dce596f45ad984cf500019ec0f28e43cf65725c50eafac2
-
SHA512
69ecb095af5539510a0ce4d53c9e2795fac541e85edada7e64c607effe26666818ec8cb549c0fa51e9f8acb159239250e95518f9322c023f71f5fb006e63b87c
-
SSDEEP
3072:m4HzbtjhPqf78DzKwONIhjNsC95SzufoabiFj:zTBjJ1m0hLUFj
Malware Config
Signatures
Files
-
97754b8e233c05242dce596f45ad984cf500019ec0f28e43cf65725c50eafac2.exe windows x86
ca61ec4d278e8fbfea250a9e4825335c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
OpenMutexW
GetFileAttributesA
ResumeThread
HeapFree
GetCurrentProcess
VirtualProtectEx
GetPrivateProfileIntW
SetLastError
HeapDestroy
DeviceIoControl
DeviceIoControl
CreateEventW
GetPrivateProfileSectionA
GetDriveTypeA
GetStringTypeA
LoadLibraryW
TlsGetValue
lstrlenA
DeleteFileA
ClearCommBreak
GetProcessHeap
rasapi32
DwCloneEntry
RasDeleteEntryA
DwCloneEntry
RasDialA
DwRasUninitialize
DwEnumEntryDetails
RasDeleteEntryA
DwRasUninitialize
DwEnumEntryDetails
RasDialA
DwEnumEntryDetails
DwRasUninitialize
RasDialA
p2p
PeerGetNextItem
PeerPnrpStartup
PeerEnumGroups
PeerFreeData
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ