Static task
static1
Behavioral task
behavioral1
Sample
aca24276da8b62e9f7430db0694208d4df9a39181f9bb813c4ab6156e3a67ccb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aca24276da8b62e9f7430db0694208d4df9a39181f9bb813c4ab6156e3a67ccb.exe
Resource
win10v2004-20220812-en
General
-
Target
aca24276da8b62e9f7430db0694208d4df9a39181f9bb813c4ab6156e3a67ccb
-
Size
211KB
-
MD5
810f84ef160076615745dd45031b29ca
-
SHA1
00c61b4199924893bacb7e6edfa7f04e20e5f203
-
SHA256
aca24276da8b62e9f7430db0694208d4df9a39181f9bb813c4ab6156e3a67ccb
-
SHA512
ff7eafdd3249e1914082c16c5087757d36e51192ab62ce6a4c1860c2aedde8c39130ca818675ba0edb2da917c5f8a6313fa939b124bc795ef8157e559fe6e3b4
-
SSDEEP
6144:QsV6TtDRiyVgfXvZOZBfJDtMDnCEqJY7npPkdaiOwIF/:AZDRmHcZBfcA67ny2F/
Malware Config
Signatures
Files
-
aca24276da8b62e9f7430db0694208d4df9a39181f9bb813c4ab6156e3a67ccb.exe windows x86
947d0760dfe727b0aa4f40cc6c543ccf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
WideCharToMultiByte
lstrcmpA
SetLastError
MultiByteToWideChar
CreateFileA
GetProcessHeap
GetLocaleInfoW
GetLocalTime
FindResourceA
QueryPerformanceCounter
GetEnvironmentStringsW
SystemTimeToFileTime
LoadLibraryW
HeapFree
HeapAlloc
GetCurrentProcessId
GetVolumeInformationA
GetOEMCP
LockResource
SetUnhandledExceptionFilter
GetCurrentProcess
QueryDosDeviceA
lstrlenA
GetTickCount
lstrcpyA
CloseHandle
rasctrs
CloseRasPerformanceData
OpenRasPerformanceData
CollectRasPerformanceData
raschap
RasEapGetInfo
RasCpEnumProtocolIds
RasCpGetInfo
rasman
RasAllocateRoute
IsRasmanProcess
RasAddConnectionPort
RasActivateRouteEx
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
rasapi32
RasValidateEntryNameW
DwCloneEntry
RasSetSubEntryPropertiesW
RasValidateEntryNameA
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 19KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ