Static task
static1
Behavioral task
behavioral1
Sample
47915f9cef9b25f53784dd00cf9028aeeb308dd5414442fef08b23e9b7a6d3c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47915f9cef9b25f53784dd00cf9028aeeb308dd5414442fef08b23e9b7a6d3c5.exe
Resource
win10v2004-20220901-en
General
-
Target
47915f9cef9b25f53784dd00cf9028aeeb308dd5414442fef08b23e9b7a6d3c5
-
Size
308KB
-
MD5
a0c503dcd44e5f9e476984c660811c30
-
SHA1
fa645b1c60313fcfe9e8cc12319f74e314edb00f
-
SHA256
47915f9cef9b25f53784dd00cf9028aeeb308dd5414442fef08b23e9b7a6d3c5
-
SHA512
9957e5726c9d13a6e4c6edaea2caeea5b35bac1b6381905c0cf60eda4626af7e19c1d639ce93aeb08f6b097196cefe8ac379732ed7b72c80ed230d39991d98c5
-
SSDEEP
6144:wy/291FS/YSgHAJ08sKHUz+HCA2Jc2aO5Vp3vvVZCnUa9Hu3BDx+suDgS:u9WAAIgUz+iA24OxfvVZCURxi
Malware Config
Signatures
Files
-
47915f9cef9b25f53784dd00cf9028aeeb308dd5414442fef08b23e9b7a6d3c5.exe windows x86
952551fbe6e51f9af94edc99df54afdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
GetProcessHeap
GetDriveTypeA
SetLastError
DeviceIoControl
GetPrivateProfileIntW
ResumeThread
GetStringTypeA
DeviceIoControl
lstrlenA
ClearCommBreak
GetPrivateProfileSectionA
LoadLibraryW
CreateEventW
GetFileAttributesA
OpenMutexW
DeleteFileA
HeapFree
GetCurrentProcess
TlsGetValue
VirtualProtectEx
rasapi32
RasDialA
DwCloneEntry
DwRasUninitialize
RasDialA
RasDeleteEntryA
DwRasUninitialize
RasDialA
DwEnumEntryDetails
DwEnumEntryDetails
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize
DwCloneEntry
p2p
PeerGetNextItem
PeerEnumGroups
PeerFreeData
PeerPnrpStartup
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ