Static task
static1
Behavioral task
behavioral1
Sample
b383cbd9db1fe29fc9b1c0a009187e9459b82797b945e29b1139b34f8a89624a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b383cbd9db1fe29fc9b1c0a009187e9459b82797b945e29b1139b34f8a89624a.exe
Resource
win10v2004-20220812-en
General
-
Target
b383cbd9db1fe29fc9b1c0a009187e9459b82797b945e29b1139b34f8a89624a
-
Size
129KB
-
MD5
96ac765d7718ab9c4e705d2e59f941c0
-
SHA1
35f005a8498594add9bfa2f0e437432ec74d1357
-
SHA256
b383cbd9db1fe29fc9b1c0a009187e9459b82797b945e29b1139b34f8a89624a
-
SHA512
45eeb12a2ad73d65e1a1d0ba3eca82a54432c0c11d67b8515a5c0dfa77c60579546c018d5c5f3ddf3925a5ec67096ff648eab3b87e55170d5088d51751255fe5
-
SSDEEP
3072:bCjr8iDwZf2SfjwqeRKRYcAWekgyJxao88AuPdT4ZvqRNpq:bXi2f2SfjwrKRYjWxLHAsT0INp
Malware Config
Signatures
Files
-
b383cbd9db1fe29fc9b1c0a009187e9459b82797b945e29b1139b34f8a89624a.exe windows x86
04978396c9cedd518547fcaccfdb0782
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
HeapDestroy
lstrlenA
SetLastError
ResumeThread
DeviceIoControl
CreateEventW
ClearCommBreak
OpenMutexW
GetCurrentThread
DeviceIoControl
VirtualProtectEx
DeleteFileA
GetPrivateProfileSectionA
GetProcessHeap
GetStringTypeA
LoadLibraryW
GetDriveTypeA
GetFileAttributesA
GetPrivateProfileIntW
HeapFree
rasapi32
DwRasUninitialize
DwEnumEntryDetails
RasDialA
DwCloneEntry
RasDialA
DwEnumEntryDetails
RasDialA
RasDeleteEntryA
DwRasUninitialize
DwEnumEntryDetails
DwRasUninitialize
DwCloneEntry
RasDeleteEntryA
pdh
PdhGetLogFileTypeA
PdhCloseLog
PdhGetLogFileSize
PdhAddCounterA
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ