Static task
static1
Behavioral task
behavioral1
Sample
6e6670d7337f3a38603b3724d181c6532d66ff07d7a7478b3c7ab3ad7be3afd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e6670d7337f3a38603b3724d181c6532d66ff07d7a7478b3c7ab3ad7be3afd1.exe
Resource
win10v2004-20220812-en
General
-
Target
6e6670d7337f3a38603b3724d181c6532d66ff07d7a7478b3c7ab3ad7be3afd1
-
Size
308KB
-
MD5
4c0cd1e1f3d5bbfa64095bbadf2f6630
-
SHA1
ab99c87137fa1995a1309bac0459351214982154
-
SHA256
6e6670d7337f3a38603b3724d181c6532d66ff07d7a7478b3c7ab3ad7be3afd1
-
SHA512
03c5fb1733a1cac60cc2208929f8d1eaf2e97865316e73d0fef286b396570712f42ebded0504cdcabebe960f650a9e47ac616684e3b9e55acd1d5e7ab481724e
-
SSDEEP
6144:WX91FtmZQ36D0VzYqQnWA0wls3ARkxC7WudSomeU2QM0rkWs:WX9IZvszMWA0wlsCkxgWud9yMYkWs
Malware Config
Signatures
Files
-
6e6670d7337f3a38603b3724d181c6532d66ff07d7a7478b3c7ab3ad7be3afd1.exe windows x86
9e50f81c2c92208bea08c301f5374856
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtectEx
HeapFree
GetCurrentThread
ClearCommBreak
ResumeThread
GetPrivateProfileSectionA
TlsGetValue
HeapDestroy
lstrlenA
LoadLibraryW
GetFileAttributesW
GetProcessHeap
GetStringTypeW
CreateEventW
SetLastError
DeviceIoControl
DeleteFileA
DeviceIoControl
CreateMutexA
GetDriveTypeA
GetPrivateProfileIntW
rasapi32
DwEnumEntryDetails
DwEnumEntryDetails
RasDeleteEntryA
DwRasUninitialize
DwEnumEntryDetails
DwRasUninitialize
RasDialA
DwRasUninitialize
RasDialA
DwCloneEntry
DwCloneEntry
RasDeleteEntryA
RasDialA
pdh
PdhGetLogFileSize
PdhCloseLog
PdhAddCounterA
PdhGetLogFileTypeA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ