Static task
static1
Behavioral task
behavioral1
Sample
e8e633684a64824960a27a6bf0827eba24d095dbb9a82025a7d62db9b2f58da8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8e633684a64824960a27a6bf0827eba24d095dbb9a82025a7d62db9b2f58da8.exe
Resource
win10v2004-20220812-en
General
-
Target
e8e633684a64824960a27a6bf0827eba24d095dbb9a82025a7d62db9b2f58da8
-
Size
403KB
-
MD5
82ec3231902294aecaef62812ef90b60
-
SHA1
008c47b9fdfc709b5153de8aef6c42ebd3cdec6f
-
SHA256
e8e633684a64824960a27a6bf0827eba24d095dbb9a82025a7d62db9b2f58da8
-
SHA512
7dded29636a86db1869c83c3b8383a86ba42869405f579c34cc0e337c224b2d7b671542ecc7b381d8deb7f195077019d1585b27bbfb7bfe03d9ad2e3013966d7
-
SSDEEP
12288:N/uGQJS3/1ItwOpwFXGk6Jn0lgTvy8tuDNbS:YGp/OCOOFX96hzqWuJS
Malware Config
Signatures
Files
-
e8e633684a64824960a27a6bf0827eba24d095dbb9a82025a7d62db9b2f58da8.exe windows x86
3bdf660be24416192d05649693047ae0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
LoadLibraryW
GetDriveTypeA
lstrlenA
GetPrivateProfileSectionA
GetPrivateProfileIntW
SetLastError
VirtualProtectEx
GetProcessHeap
ClearCommBreak
GetCurrentThread
CreateEventW
TlsGetValue
DeviceIoControl
ResumeThread
DeleteFileA
DeviceIoControl
GetFileAttributesA
GetStringTypeW
CreateMutexA
HeapFree
rasapi32
RasDeleteEntryA
DwRasUninitialize
RasDialA
DwEnumEntryDetails
DwCloneEntry
DwRasUninitialize
RasDialA
DwRasUninitialize
DwCloneEntry
RasDialA
DwEnumEntryDetails
DwEnumEntryDetails
RasDeleteEntryA
pdh
PdhGetLogFileSize
PdhAddCounterA
PdhCloseLog
PdhGetLogFileTypeA
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 397KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ