Static task
static1
Behavioral task
behavioral1
Sample
f333f832693e5abdcfd09d78bbb5f3b41084aea55010db154b2f6563790408f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f333f832693e5abdcfd09d78bbb5f3b41084aea55010db154b2f6563790408f5.exe
Resource
win10v2004-20220901-en
General
-
Target
f333f832693e5abdcfd09d78bbb5f3b41084aea55010db154b2f6563790408f5
-
Size
403KB
-
MD5
90666698113dd09312e73692310c5340
-
SHA1
7ddf758b96d0812fe1e489260c3081a8c4da94c9
-
SHA256
f333f832693e5abdcfd09d78bbb5f3b41084aea55010db154b2f6563790408f5
-
SHA512
3c257310222cfe16c663f1751162c3e0b05ef9d2dce593f5b2e063123e1a0bdb49c77cd31afe9dd84dd400cc112e63481ab48c47ad1811e476ed279171881db9
-
SSDEEP
12288:yEZuGQJS3/1ItwOpwFXGk6Jn0lgTvy8tuDNbS:j0Gp/OCOOFX96hzqWuJS
Malware Config
Signatures
Files
-
f333f832693e5abdcfd09d78bbb5f3b41084aea55010db154b2f6563790408f5.exe windows x86
0d9795adcd2ba5b7dbe8a077f44beb64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
LoadLibraryW
DeviceIoControl
GetPrivateProfileIntW
ResumeThread
DeleteFileA
GetCurrentThread
SetLastError
CreateEventW
GetPrivateProfileSectionA
VirtualProtectEx
GetDriveTypeA
OpenMutexW
GetStringTypeA
HeapDestroy
GetProcessHeap
TlsGetValue
lstrlenA
GetFileAttributesA
HeapFree
ClearCommBreak
rasapi32
RasDeleteEntryA
DwEnumEntryDetails
DwCloneEntry
RasDialA
DwCloneEntry
DwEnumEntryDetails
RasDeleteEntryA
DwRasUninitialize
DwRasUninitialize
RasDialA
DwEnumEntryDetails
DwRasUninitialize
RasDialA
pdh
PdhGetLogFileTypeA
PdhCloseLog
PdhAddCounterA
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 397KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ