Static task
static1
Behavioral task
behavioral1
Sample
8385f4c6842c65636346db76e8b23b0527cbcf9153eac5920fdf907d5b18e2ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8385f4c6842c65636346db76e8b23b0527cbcf9153eac5920fdf907d5b18e2ae.exe
Resource
win10v2004-20220901-en
General
-
Target
8385f4c6842c65636346db76e8b23b0527cbcf9153eac5920fdf907d5b18e2ae
-
Size
307KB
-
MD5
84d6d3e92dddc1f566ce44caf440afe0
-
SHA1
31f2fa6383de3e2bfe9de8c3fd904594559166a4
-
SHA256
8385f4c6842c65636346db76e8b23b0527cbcf9153eac5920fdf907d5b18e2ae
-
SHA512
65c19ce3b235f3e2aa8a9f72a608e2ac4cd1963dd2f2b306f86d53b46937401effc12964a2b8d72aea8821db8f3b270e7d40256361532584a7359b10edc835a9
-
SSDEEP
6144:aKN91FyM7KE1NYe25I7JZ7gr5kf0ahy/s+CUi8rcppADNjWMM0B:DN93KD5I7JZ74ahy/stUi8o4DNy4
Malware Config
Signatures
Files
-
8385f4c6842c65636346db76e8b23b0527cbcf9153eac5920fdf907d5b18e2ae.exe windows x86
da684764175df23c9bfda4fd5ff924ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ClearCommBreak
GetCurrentThread
GetPrivateProfileSectionA
VirtualProtectEx
GetFileAttributesA
HeapDestroy
DeviceIoControl
GetPrivateProfileIntW
CreateEventW
SetLastError
GetStringTypeA
GetProcessHeap
GetDriveTypeA
DeleteFileA
DeviceIoControl
LoadLibraryW
OpenMutexW
lstrlenA
HeapFree
TlsGetValue
ResumeThread
rasapi32
RasDialA
RasDialA
DwRasUninitialize
DwCloneEntry
DwRasUninitialize
DwRasUninitialize
RasDeleteEntryA
DwEnumEntryDetails
RasDeleteEntryA
DwEnumEntryDetails
RasDialA
DwEnumEntryDetails
DwCloneEntry
pdh
PdhAddCounterA
PdhGetLogFileSize
PdhCloseLog
PdhGetLogFileTypeA
Sections
.text Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ