Static task
static1
Behavioral task
behavioral1
Sample
6df74dada4757389f28d2357e30dbb624fe330cb4041f91789897ceeea139647.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6df74dada4757389f28d2357e30dbb624fe330cb4041f91789897ceeea139647.exe
Resource
win10v2004-20220812-en
General
-
Target
6df74dada4757389f28d2357e30dbb624fe330cb4041f91789897ceeea139647
-
Size
403KB
-
MD5
96ef4109d98deb594a40a975fceeaae0
-
SHA1
4ee8f486c636cf17101f37e3aa21fcef2ea2a4a0
-
SHA256
6df74dada4757389f28d2357e30dbb624fe330cb4041f91789897ceeea139647
-
SHA512
838dbb67cc00f2d4f7ffab3f42646b2d59a3685122518c542b2981cb32cadd3564fdaef83f346c71a715cc9facf803999b4a44c0e8d0252b51ac97a13d8eb9a4
-
SSDEEP
12288:Y3uGQJS3/1ItwOpwFXGk6Jn0lgTvy8tuDNbS:BGp/OCOOFX96hzqWuJS
Malware Config
Signatures
Files
-
6df74dada4757389f28d2357e30dbb624fe330cb4041f91789897ceeea139647.exe windows x86
0cf28df2a4ad8d066b3ecf081c8cb33e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
ResumeThread
DeleteFileA
lstrlenA
TlsGetValue
LoadLibraryW
GetFileAttributesW
CreateMutexA
DeviceIoControl
ClearCommBreak
VirtualProtectEx
GetCurrentThread
HeapDestroy
CreateEventW
GetStringTypeW
GetPrivateProfileIntW
DeviceIoControl
HeapFree
SetLastError
GetProcessHeap
GetDriveTypeA
rasapi32
DwRasUninitialize
RasDeleteEntryA
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize
DwEnumEntryDetails
RasDialA
DwRasUninitialize
RasDialA
DwCloneEntry
DwEnumEntryDetails
DwCloneEntry
RasDialA
pdh
PdhAddCounterA
PdhCloseLog
PdhGetLogFileTypeA
PdhGetLogFileSize
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 397KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ