Static task
static1
Behavioral task
behavioral1
Sample
30edf8f28954dbb5aa3d215f339e1ae1416d4be4a144352910f2abbd6deeb9a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30edf8f28954dbb5aa3d215f339e1ae1416d4be4a144352910f2abbd6deeb9a8.exe
Resource
win10v2004-20220812-en
General
-
Target
30edf8f28954dbb5aa3d215f339e1ae1416d4be4a144352910f2abbd6deeb9a8
-
Size
492KB
-
MD5
81b7e2f55ec2010a5dfbecb67168db30
-
SHA1
0f16c2d60c8eba0f984fa1f636451a698dd1aff5
-
SHA256
30edf8f28954dbb5aa3d215f339e1ae1416d4be4a144352910f2abbd6deeb9a8
-
SHA512
b17e2d221f5e45b8615362c154d270ca389670e3a0fffcfa002fe29c0f05400d2c0cbca28ca8d93ebafe548cd819c6c50ce5395c5f257591fdda67487112ef5e
-
SSDEEP
12288:J/D1189xFgDP1/t0oDzht7DOinbv06e7SCT8:1Nt/t0oXLHZbvBrp
Malware Config
Signatures
Files
-
30edf8f28954dbb5aa3d215f339e1ae1416d4be4a144352910f2abbd6deeb9a8.exe windows x86
e6405451167f91944d41db7f61bfa09a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_cexit
strstr
__setusermatherr
sprintf
_initterm
_wcsicmp
__winitenv
_adjust_fdiv
_c_exit
__p__fmode
_exit
_except_handler3
printf
_stricmp
wcscpy
__wgetmainargs
_XcptFilter
rasdlg
RasAutodialQueryDlgW
RasPhonebookDlgW
RasDialDlgW
kernel32
FreeLibrary
GetTickCount
LocalFree
GetProcAddress
GetCPInfo
GetCurrentProcessId
RemoveDirectoryW
GetLastError
WideCharToMultiByte
GetWindowsDirectoryW
ExpandEnvironmentStringsW
LoadLibraryA
LocalAlloc
GetModuleFileNameW
MultiByteToWideChar
VirtualFree
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
rasapi32
RasGetAutodialParamW
RasEnumAutodialAddressesW
RasGetAutodialAddressW
shlwapi
StrCatW
Sections
.safdwer Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ