Static task
static1
Behavioral task
behavioral1
Sample
9e6fce9fb47abff5066ed26f2382f1c22438160e85e1cc49414400c626ea0ba2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e6fce9fb47abff5066ed26f2382f1c22438160e85e1cc49414400c626ea0ba2.exe
Resource
win10v2004-20220812-en
General
-
Target
9e6fce9fb47abff5066ed26f2382f1c22438160e85e1cc49414400c626ea0ba2
-
Size
130KB
-
MD5
9234a0d6533cdeac71f48d94a16a6fa5
-
SHA1
adfd60673df91c0a8f7cba4f668c679eb981dee0
-
SHA256
9e6fce9fb47abff5066ed26f2382f1c22438160e85e1cc49414400c626ea0ba2
-
SHA512
445906a613bc73d49c7c8bb34a367ff49269b0bf3d4d5f1a4dc4a28a32d32b277c3c21ad7a45dc7812e0683d1c1285e66a0bd6a5603cc522264762599bf3b883
-
SSDEEP
3072:RGCJ67IwMSbW9v0mhJ8+ZGrkpQbQja1oQIGe1UQ4:wCUMSbW9U+kkcT
Malware Config
Signatures
Files
-
9e6fce9fb47abff5066ed26f2382f1c22438160e85e1cc49414400c626ea0ba2.exe windows x86
610485a8a748d85b614646a807adf595
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThread
ResumeThread
TlsGetValue
GetProcessHeap
ClearCommBreak
GetPrivateProfileSectionA
SetLastError
DeleteFileA
VirtualProtectEx
HeapDestroy
LoadLibraryW
GetDriveTypeA
DeviceIoControl
GetPrivateProfileIntW
HeapFree
CreateEventW
GetStringTypeW
CreateMutexA
lstrlenA
GetFileAttributesW
DeviceIoControl
rasapi32
DwRasUninitialize
RasDeleteEntryA
DwCloneEntry
DwEnumEntryDetails
RasDeleteEntryA
DwRasUninitialize
DwEnumEntryDetails
RasDialA
RasDialA
DwCloneEntry
DwRasUninitialize
RasDialA
DwEnumEntryDetails
pdh
PdhAddCounterA
PdhGetLogFileTypeA
PdhCloseLog
PdhGetLogFileSize
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ