Static task
static1
Behavioral task
behavioral1
Sample
61c876e3205910e8c8356541f7f1944667d207cfc0a1a746ee332e755f1907df.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61c876e3205910e8c8356541f7f1944667d207cfc0a1a746ee332e755f1907df.exe
Resource
win10v2004-20220812-en
General
-
Target
61c876e3205910e8c8356541f7f1944667d207cfc0a1a746ee332e755f1907df
-
Size
72KB
-
MD5
9117cde7c5c2c1934acccd9bf8f6a2f0
-
SHA1
7675b79f990ded199fc6749e086b80090645aef3
-
SHA256
61c876e3205910e8c8356541f7f1944667d207cfc0a1a746ee332e755f1907df
-
SHA512
ef8ed72692a7703d5be9940564d58e12e0bd9613cd17ef9b2a1cfe7d80a0cf9f43c2f9b077dd28e48e5596b5e6bb10118763144182d25ab39120ec22f113f381
-
SSDEEP
768:volDxGHSUuTTw+/DuZysImHpCFby8klhHiN6kmxJAqpcI0QYSyOdCogy0cR4MA3J:vmxGyUuY+7KDJbXH86k8J0IWQ2p
Malware Config
Signatures
Files
-
61c876e3205910e8c8356541f7f1944667d207cfc0a1a746ee332e755f1907df.exe windows x86
05e9d64a27830fb3fd340052b62cf313
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
DeviceIoControl
GetProcessHeap
DeviceIoControl
CreateEventW
GetPrivateProfileSectionA
HeapDestroy
GetPrivateProfileIntW
OpenMutexW
SetLastError
GetDriveTypeA
DeleteFileA
GetStringTypeA
ClearCommBreak
TlsGetValue
lstrlenA
HeapFree
GetCurrentThread
LoadLibraryW
ResumeThread
VirtualProtectEx
rasapi32
DwRasUninitialize
DwRasUninitialize
DwCloneEntry
RasDialA
RasDeleteEntryA
RasDialA
DwRasUninitialize
DwCloneEntry
RasDeleteEntryA
DwEnumEntryDetails
RasDialA
DwEnumEntryDetails
DwEnumEntryDetails
pdh
PdhGetLogFileSize
PdhCloseLog
PdhGetLogFileTypeA
PdhAddCounterA
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ